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1. Name of Standard: Secure Hash Signature Standard (SHS) (FIPS PUB 180-2). 
2. Category of Standard: Computer Security Standard, Cryptography. 


3. Explanation: This Standard specifies four secure hash algorithms - SHA-1, SHA-256, 
SHA-384, and SHA-512 - for computing a condensed representation of electronic data 
(message). When a message of any length < 2 bits (for SHA-1 and SHA-256) or < 2'® bits (for 
SHA-384 and SHA-512) is input to an algorithm, the result is an output called a message digest. 
The message digests range in length from 160 to 512 bits, depending on the algorithm. Secure 
hash algorithms are typically used with other cryptographic algorithms, such as digital signature 
algorithms and keyed-hash message authentication codes, or in the generation of random 
numbers (bits). 


The four hash algorithms specified in this standard are called secure because, for a given 
algorithm, it is computationally infeasible 1) to find a message that corresponds to a given 
message digest, or 2) to find two different messages that produce the same message digest. Any 
change to a message will, with a very high probability, result in a different message digest. This 
will result in a verification failure when the secure hash algorithm is used with a digital signature 
algorithm or a keyed-hash message authentication algorithm. 


This standard supersedes FIPS 180-1, adding three algorithms that are capable of producing 
larger message digests. The SHA-1 algorithm specified herein is the same algorithm that was 
specified previously in FIPS 180-1, although some of the notation has been modified to be 
consistent with the notation used in the SHA-256, SHA-384, and SHA-512 algorithms. 


4. Approving Authority: Secretary of Commerce. 


5. Maintenance Agency: U.S. Department of Commerce, National Institute of Standards and 
Technology (NIST), Information Technology Laboratory (ITL). 


6. Applicability: This standard is applicable to all Federal departments and agencies for the 
protection of sensitive unclassified information that is not subject to section 2315 of Title 10, 
United States Code, or section 3502(2) of Title 44, United States Code. This standard shall be 
implemented whenever a secure hash algorithm is required for Federal applications, including 
use by other cryptographic algorithms and protocols. The adoption and use of this standard is 
available to private and commercial organizations. 


7. Specifications: Federal Information Processing Standard (FIPS) 180-2, Secure Hash 
Standard (SHS) (affixed). 


8. Implementations: The secure hash algorithms specified herein may be implemented in 
software, firmware, hardware or any combination thereof. Only algorithm implementations that 
are validated by NIST will be considered as complying with this standard. Information about the 
planned validation program can be obtained at http://csrc.nist.gov/cryptval/ or from the National 
Institute of Standards and Technology, Information Technology Laboratory, Attn: SHS 
Validation, 100 Bureau Drive Stop 8930, Gaithersburg, MD 20899-8930. 


9. Implementation Schedule: This standard becomes effective on February 1, 2003. 


10. Patents: Implementations of the secure hash algorithms in this standard may be covered by 
U.S. or foreign patents. 


11. Export Control: Certain cryptographic devices and technical data regarding them are 
subject to Federal export controls. Exports of cryptographic modules implementing this standard 
and technical data regarding them must comply with these Federal regulations and be licensed by 
the Bureau of Export Administration of the U.S. Department of Commerce. Applicable Federal 
government export controls are specified in Title 15, Code of Federal Regulations (CFR) Part 
740.17; Title 15, CFR Part 742; and Title 15, CFR Part 774, Category 5, Part 2. 


12. Qualifications: While it is the intent of this standard to specify general security 
requirements for generating a message digest, conformance to this standard does not assure that a 
particular implementation is secure. The responsible authority in each agency or department 
shall assure that an overall implementation provides an acceptable level of security. This 
standard will be reviewed every five years in order to assess its adequacy. 


13. Waiver Procedure. Under certain exceptional circumstances, the heads of Federal 
agencies, or their delegates, may approve waivers to Federal Information Processing Standards 
(FIPS). The heads of such agencies may redelegate such authority only to a senior official 
designated pursuant to Section 3506(b) of Title 44, U.S. Code. Waivers shall be granted only 
when compliance with this standard would 


a. adversely affect the accomplishment of the mission of an operator of a Federal computer 
system or 

b. cause a major adverse financial impact on the operator that is not offset by government- 
wide savings. 


il 


Agency heads may act upon a written waiver request containing the information detailed above. 
Agency heads may also act without a written waiver request when they determine that conditions 
for meeting the standard cannot be met. Agency heads may approve waivers only by a written 
decision that explains the basis on which the agency head made the required finding(s). A copy 
of each such decision, with procurement sensitive or classified portions clearly identified, shall 
be sent to: National Institute of Standards and Technology; ATTN: FIPS Waiver Decision, 
Information Technology Laboratory, 100 Bureau Drive, Stop 8900, Gaithersburg, MD 20899- 
8900. 


In addition, a notice of each waiver granted and each delegation of authority to approve waivers 
shall be sent promptly to the Committee on Government Operations of the House of 
Representatives and the Committee on Government Affairs of the Senate and shall be published 
promptly in the Federal Register. 


When the determination on a waiver applies to the procurement of equipment and/or services, a 
notice of the waiver determination must be published in the Commerce Business Daily as a part 
of the notice of solicitation for offers of an acquisition or, if the waiver determination is made 
after that notice is published, by amendment to such notice. 


A copy of the waiver, any supporting documents, the document approving the waiver and any 
supporting and accompanying documents, with such deletions as the agency is authorized and 
decides to make under Section 552(b) of Title 5, U.S. Code, shall be part of the procurement 
documentation and retained by the agency. 


14. Where to Obtain Copies of the Standard: This publication is available electronically by 
accessing http://csrc.nist.gov/publications/, A list of other available computer security 
publications, including ordering information, can be obtained from NIST Publications List 91, 
which is available at the same web site. Alternatively, copies of NIST computer security 
publications are available from: National Technical Information Service (NTIS), 5285 Port 
Royal Road, Springfield, VA 22161. 
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1. INTRODUCTION 


This standard specifies four secure hash algorithms, SHA- 1}, SHA-256, SHA-384, and SHA- 
512. All four of the algorithms are iterative, one-way hash functions that can process a message 
to produce a condensed representation called a message digest. These algorithms enable the 
determination of a message’s integrity: any change to the message will, with a very high 
probability, result in a different message digest. This property is useful in the generation and 


verification of digital signatures and message authentication codes, and in the generation of 
random numbers (bits). 


Each algorithm can be described in two stages: preprocessing and hash computation. 
Preprocessing involves padding a message, parsing the padded message into m-bit blocks, and 
setting initialization values to be used in the hash computation. The hash computation generates 
a message schedule from the padded message and uses that schedule, along with functions, 
constants, and word operations to iteratively generate a series of hash values. The final hash 
value generated by the hash computation is used to determine the message digest. 


The four algorithms differ most significantly in the number of bits of security that are provided 
for the data being hashed — this is directly related to the message digest length. When a secure 
hash algorithm is used in conjunction with another algorithm, there may be requirements 
specified elsewhere that require the use of a secure hash algorithm with a certain number of bits 
of security. For example, if a message is being signed with a digital signature algorithm that 
provides 128 bits of security, then that signature algorithm may require the use of a secure hash 
algorithm that also provides 128 bits of security (e.g., SHA-256). 


Additionally, the four algorithms differ in terms of the size of the blocks and words of data that 
are used during hashing. Figure 1 presents the basic properties of all four secure hash 
algorithms. 


Algorithm Message Size Block Size Word Size Message Digest Size Security” 


(bits) (bits) (bits) (bits) (bits) 
SHA-1 ee 512 32 160 80 
SHA-256 aoe 512 32 256 128 
SHA-384 Zoe 1024 64 384 192 
SHA-512 So 1024 64 512 256 


Figure 1: Secure Hash Algorithm Properties 


' The SHA-1 algorithm specified in this document is identical to the SHA-1 algorithm specified in FIPS 180-1 [180- 
1]. However, this specification, FIPS 180-2, uses ROTL”(X) instead of S” (X) [180-1] to denote “circular left shift 
by n bits” (1.e., “left rotation by n bits”). This is described in Sec. 3.2. Some other notational changes have been 
made in order to be consistent with the specifications for SHA-256, SHA-384, and SHA-512. 


* In this context, “security” refers to the fact that a birthday attack [HAC] on a message digest of size n produces a 


collision with a workfactor of approximately a 


2. DEFINITIONS 


2.1. Glossary of Terms and Acronyms 


Bit 
Byte 
FIPS 


Word 


A binary digit having a value of 0 or 1. 
A group of eight bits. 
Federal Information Processing Standard. 


A group of either 32 bits (4 bytes) or 64 bits (8 bytes), depending on the 
secure hash algorithm. 


2.2 Algorithm Parameters, Symbols, and Terms 


2.2.1 Parameters 
The following parameters are used in the secure hash algorithm specifications in this standard. 


a, b,c, ...,h | Working variables that are the w-bit words used in the computation of the 


H® 
H® 


J 


K, 


hash values, H®, 


The i” hash value. H© is the initial hash value; H™ is the final hash value 
and is used to determine the message digest. 


The j‘" word of the i" hash value, where H<” is the left- most word of hash 
value i. 


Constant value to be used for iteration ¢ of the hash computation. 
Number of zeroes appended to a message during the padding step. 
Length of the message, M, in bits. 

Number of bits in a message block, M. 

Message to be hashed. 


Message block i, with a size of m bits. 


The j‘" word of the i'" message block, where M‘” is the left-most word of 
message block i. 


w 
W, 


2.2.2 Symbols 


Number of bits to be rotated or shifted when a word is operated upon. 
Number of blocks in the padded message. 

Temporary w-bit word used in the hash computation. 

Number of bits in a word. 


The r'" w-bit word of the message schedule. 


The following symbols are used in the secure hash algorithm specifications, and each operates on 


w-bit words. 


A 


Vv 


<< 


>> 


Bitwise AND operation. 

Bitwise OR (“inclusive-OR”’) operation. 
Bitwise XOR (“exclusive-OR”) operation. 
Bitwise complement operation. 

Addition modulo 2". 


Left-shift operation, where x << n is obtained by discarding the left-most n 
bits of the word x and then padding the result with n zeroes on the right. 


Right-shift operation, where x >> n is obtained by discarding the right- 
most n bits of the word x and then padding the result with n zeroes on the 
left. 


3. 


3.1 


NOTATION AND CONVENTIONS 


Bit Strings and Integers 


The following terminology related to bit strings and integers will be used. 


1. 


A hex digit is an element of the set {0, 1,.., 9, a,.., f£}. A hex digit is the 
representation of a 4bit string. For example, the hex digit “7” represents the 4bit 
string “0111”, and the hex digit “a” represents the 4-bit string “1010”. 


A word is a w-bit string that may be represented as a sequence of hex digits. To 
convert a word to hex digits, each 4-bit string is converted to its hex digit equivalent, 
as described in (1) above. For example, the 32-bit string 

1010 0001 0000 0011 1111 1110 0010 0011 


can be expressed as “al 03fe23”, and the 64-bit string 


po 


1010 0001 0000 0011 1111 1110 0010 001 
0011 0010 1110 1111 0011 0000 0001 1010 


























can be expressed as “al03fe2332ef301a”. 


Throughout this specification, the “big-endian” convention is used when expressing 
both 32- and 64-bit words, so that within each word, the most significant bit is stored 
in the left-most bit position. 


An integer may be represented as a word or pair of words. A word representation of 
the message length, @, in bits, is required for the padding techniques of Sec. 5.1. 


An integer between 0 and 2°”-1 inclusive may be represented as a 32-bit word. The 
least significant four bits of the integer are represented by the right-most hex digit of 
the word representation. For example, the integer 291 = 2° + 2° + 2' + 2° = 
256+32+2+1 is represented by the hex word 00000123. 


The same holds true for an integer between O and el inclusive, which may be 
represented as a 64-bit word. 


If Z is an integer, 0 < Z< a, then Z = 2°°X + Y, where 0 < X< 2°? and 0 < Y< 2°”. 
Since X and Y can be represented as 32-bit words x and y, respectively, the integer Z 
can be represented as the pair of words (x, y). This property is used for SHA-1 and 
SHA-256. 


If Z is an integer,O < Z< 2 then Z = 2X + Y, where 0 < X¥< 2% and0 < Y< 2%. 
Since X and Y can be represented as 64-bit words x and y, respectively, the integer Z 
can be represented as the pair of words (x, y). This property is used for SHA-384 and 
SHA-512. 


4. For the secure hash algorithms, the size of the message block - m bits - depends on the 
algorithm. 


a) For SHA-1 and SHA-256, each message block has 512 bits, which are 
represented as a sequence of sixteen 32-bit words. 


b) For SHA-384 and SHA-512, each message block has 1024 bits, which are 
represented as a sequence of sixteen 64-bit words. 


3.2 Operations on Words 
The following operations are applied to w-bit words in all four secure hash algorithms. SHA-1 


and SHA-256 operate on 32-bit words (w = 32), and SHA-384 and SHA-512 operate on 64-bit 
words (w = 64). 
1. Bitwise Jogical word operations: A, v, ®, and — (see Sec. 2.2.2). 
2. Addition modulo 2”. 
The operation x + y is defined as follows. The words x and y represent integers X and 
Y, where 0 < X < 2” and0 < Y< 2". For positive integers U and V, let U modV be 
the remainder upon dividing U by V. Compute 
Z=(X+Y) mod 2”. 


Then 0 < Z< 2". Convert the integer Z to a word, z, and define z = x + y. 


3. The right shift operation SHR "(x), where x is a w-bit word and n is an integer with 0 
< n<vw, is defined by 


SHR"(x) =x >>n. 
This operation is used in the SHA-256, SHA-384, and SHA-512 algorithms. 


4. The rotate right (circular right shift) operation ROTR "(x), where x is a w-bit word 
and n is an integer with 0 < n<w, is defined by 


ROTR"(x) = (x >>n) v (x <<w-n). 


Thus, ROTR"(x) is equivalent to a circular shift (rotation) of x by n positions to the 
right. 


This operation is used by the SHA-256, SHA-384, and SHA-512 algorithms. 


5. The rotate left (circular left shift) operation, ROTL "(x), where x is a w-bit word and n 
is an integer with 0 < n<w, is defined by 


ROTL"(x) = (x <<n) v (x >>w-n). 


Thus, ROTL "(x) is equivalent to a circular shift (rotation) of x by n positions to the 
left. 


This operation is used only in the SHA-1 algorithm. Note that in Ref. [180-1] this 
operation was referred to as “S"(X)’; however, the notation has been modified for 
clarity and consistency with the notation used for operations in the other secure hash 
algorithms. 

6. Note the following equivalence relationships, where w is fixed in each relationship: 


ROTL"(x) = ROTR “"(x) 


ROTR"(x) ~ ROTL (x). 


4. FUNCTIONS AND CONSTANTS 


4.1 Functions 

This section defines the functions that are used by each of the algorithms. Although the SHA- 
256, SHA-384, and SHA-512 algorithms all use similar functions, their descriptions are 
separated into sections for SHA-256 (Sec. 4.1.2) and for SHA-384 and SHA-512 (Sec. 4.1.3), 
since the input and output for these functions are words of different sizes. Each of the algorithms 
include Ch(x, y, z) and Maj(x, y, z) functions; the exclusive-OR operation ( © ) in these functions 
may be replaced by a bitwise OR operation (v ) and produce identical results. 


4.1.1. SHA-1 Functions 


SHA-1 uses a sequence of logical functions, fo, fi,...,,f79. Each function f,, where 0 < t < 79, 
operates on three 32-bit words, x, y, and z, and produces a 32-bit word as output. The function /; 
(x, y, z) is defined as follows: 


Ch(x, y, Z)=(xAy) ® (AXAzZ) O<t<19 
Parity(x, y,2=x @y@z 20 <t< 39 

fi @.y 2= (4.1) 
Maj(x, y, Z)=(x«aAy) ® (xAz) ® (VAz) 40 <t< 59 
Parity(x, y,z=x By @ z 60 <t< 79. 


4.1.2 SHA-256 Functions 


SHA-256 uses six logical functions, where each function operates on 32-bit words, which are 
represented as x, y, and z. The result of each function is a new 32-bit word. 


Ch(x,y,z) = (xAy)®AxAzZ) (4.2) 
Maj(x,y,z) = (xAy)®@(xaz)O(yaz) (4.3) 
y= ROTR*(x) © ROTRY(x) © ROTR*(x) (4.4) 
yo) = ROTR(x) © ROTR''(x) © ROTR* (x) (4.5) 
6 (x) = ROTR'(x) © ROTR'*(x) © SHR°*(x) (4.6) 
o (x) = ROTR'"(x) © ROTR'(x) ® SHR' (x) (4.7) 


4.1.3. SHA-384 and SHA-512 Functions 


SHA-384 and SHA-512 each use six logical functions, where each function operates on 64-bit 
words, which are represented as x, y, and z. The result of each function is a new 64-bit word. 


Ch(x,y,z) = (xAy)®AxAz) (4.8) 


Maj(x,y,z) = (xAy)®(xAz) @(y Az) (4.9) 
yee) = ROTR*(x) © ROTR™(x) © ROTR* (x) (4.10) 
yo) = ROTRM() ® ROTR'(x) © ROTR*'(x) (4.11) 
oP'(x) = ROTR'(x) © ROTR*(x) © SHR‘(x) (4.12) 
oP(x) = ROTR'(x) © ROTR®\(x) © SHR%(x) (4.13) 


4.2 Constants 


4.2.1. SHA-1 Constants 
SHA-1 uses a sequence of eighty constant 32-bit words, Ko, K1,...,K79, which are given by 


5a827999 O<r<19 
6ed9ebal 20 < t < 39 

K; = (4.14) 
8flbbcdc 40 <t< 59 
ca62cl1d6 60 <t< 79. 


4.2.2 SHA-256 Constants 


SHA-256 uses a sequence of sixty-four constant 32-bit words, K?°", K!°,...,K'°°. These 


words represent the first thirty-two bits of the fractional parts of the cube roots of the first sixty- 
four prime numbers. In hex, these constant words are (from left to right) 


428a2£98 71374491 b5c0fbcf e9b5dba5 3956c25b 59f111f1 923f82a4 ablcSed5d 
d807aa98 12835b01 243185be 550c7dc3 72be5d74 80deblfe 9bdc06a7 cl 9bf174 
e49b69c1l efbe4786 Ofcl9dc6 240calce 2de92c6f 4a7484aa SchO0a9dc 76f988da 
983e5152 a831c66d b00327c8 bf597£fc7 cb6e00bf3 d5a79147 06ca6351 14292967 
27b70a85 2e1b2138 4d2c6dfc 53380d13 650a7354 766a0abb 81c2c92e 92722c85 
a2bfe8al a81la664b c24b8b70 c76c51la3 d192e819 d6990624 £40e3585 106aa070 
19a4c116 1e376c08 2748774c 34b0bcb5 391cO0cb3 4ed8aa4a 5b9cca4f 682e6ff3 
7T48£82ee 78a5636f 84c87814 8cc70208 90befffa a4506ceb bef9a3f7 c67178F2. 


4.2.3. SHA-384 and SHA-512 Constants 
SHA-384 and SHA-512 use the same sequence of eighty constant 64-bit words, 
KP, KP... K3'7. These words represent the first sixty-four bits of the fractional parts of 


the cube roots of the first eighty prime numbers. In hex, these constant words are (from left to 
right) 


428a2£98d728ae22 7137449123ef65cd bd5c0fbcfec4d3b2£ e9b5dba58189dbbc 
3956c25b£348b538 59f111£1b605d019 923f82a4af194£9b ablc5ed5da6d8118 
d807aa98a3030242 12835b0145706fbe 243185be4ee4b28c 550cTdc3d5ffb4e2 
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T2be5d74£27b896F£ 
e49b69c19ef14ad2 
2de92cb6f£592b0275 
983e5152ee66dfab 
c6e00bf33da88Ffc2 
27b70a8546d22ffec 
650a73548baf63de 
a2bfe8al4cf10364 
d192e819d6ef5218 
19a4c116b8d2d0c8 
391c0cb3c5c95ab63 
748£82ee5defb2fe 
90befff£a23631e28 
ca273eceea26619c 
06f£067aa72176fba 
28db77£523047d84 
Acc5d4becb3e42b6 


80deblfe3b1696b1 
efbe4786384f25e3 
4a7484aabeabe483 
a831c66d2db43210 
d5a79147930aa725 
2e1b621385c26c926 
766a0abb3c77b2a8 
a81a664bbc423001 
d69906245565a910 
1e376c085141ab53 
4ed8aa4ae3418acb 
78a5636£43172£60 
a4506cebde82bde9 
d186b8c721c0c207 
0a637dc5a2c898a6 
32caab7b40c72493 
597£299cfc657e2a 


9bdc06a725c71235 
Ofcl9dc68b8cd5b5 
5cbh0a9dcbd41fbd4 
b00327c898Fb213£ 
06ca6351e003826f 
4d2c6dfcSsac42aed 
81c2c92e47edaee6 
c24b8b70d0£89791 
£40e35855771202a 
2748774cdf8eeb99 
5b9cca4f£7763e373 
84c87814alf0ab72 
bef9a3f£7b2c67915 
eada7dd6cde0eble 
113f£9804bef90dae 
3c9ebe0al5c9bebc 
5fcbh6fab3ad6faec 
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cl9bf174c£692694 
240calcc7Jac9c65 
76£988da831153b5 
bf£597£c7Tbeef0ee4 
142929670a0e6e70 
53380d139d95b3df 
92722c851482353b 
c76c51a30654be30 
106aa07032bbd1b8 
34b0bcb5e19b48a8 
682e6ff3d6b2b8a3 
8cc702081a6439eCc 
c67178£2e372532b 
£57d4£7fee6ed178 
16710635131c471b 
431d67c49c100d4c 
6c44198c4a475817. 


5. PREPROCESSING 


Preprocessing shall take place before hash computation begins. This preprocessing consists of 
three steps: padding the message, M (Sec. 5.1), parsing the padded message into message blocks 
(Sec. 5.2), and setting the initial hash value, H® (Sec. 5.3). 


5.1 Padding the Message 
The message, M, shall be padded before hash computation begins. The purpose of this padding 


is to ensure that the padded message is a multiple of 512 or 1024 bits, depending on the 
algorithm. 


5.1.1. SHA-1 and SHA-256 


Suppose that the length of the message, M, is @ bits. Append the bit “1” to the end of the 
message, followed by k zero bits, where k is the smallest, non-negative solution to the equation 
€+1+k =448 mod512. Then append the 64-bit block that is equal to the number / expressed 
using a binary representation. For example, the (8-bit ASCII) message “abe” has length 
8x3 = 24, so the message is padded with a one bit, then 448 — (24+1) = 423 zero bits, and then 
the message length, to become the 512-bit padded message 

423 64 


—_— A 
01100001 01100010 01100011 1 00..00 00...011000. 








“a” “bh” se” e = 24 
The length of the padded message should now be a multiple of 512 bits. 


5.1.2 SHA-384 and SHA-512 


Suppose the Ength of the message M, in bits, is ¢ bits. Append the bit “1” to the end of the 
message, followed by k zero bits, where k is the smallest nonnegative solution to the equation 
¢+1+k =896 mod 1024. Then append the 128-bit block that is equal to the number ¢ expressed 
using a binary representation. For example, the (8-bit ASCII) message “abc” has length 
8x3 = 24, so the message is padded with a one bit, then 896 —(24+1) =871 zero bits, and then 
the message length, to become the 1024-bit padded message 

871 128 


(— 
OLLO0000T - OLTO0OLO: <OLLOOODT ale 000° 00.201 2000) « 








“a” “bh” “ee” e _ 24 


The length of the padded message should now be a multiple of 1024 bits. 


Lz 


5.2 Parsing the Padded Message 


After a message has been padded, it must be parsed into N m-bit blocks before the hash 
computation can begin. 


5.2.1. SHA-1 and SHA-256 


For SHA-1 and SHA-256, the padded message is parsed into N 512-bit blocks, M, M® Sites 
M”. Since the 512 bits of the input block may be expressed as sixteen 32-bit words, the first 32 
bits of message block i are denoted M\”, the next 32 bits are M{”, and so on up to M\?. 
5.2.2. SHA-384 and SHA-512 


For SHA-384 and SHA-512, the padded message is parsed into N 1024-bit blocks, M“, M”,..., 
M. Since the 1024 bits of the input block may be expressed as sixteen 64-bit words, the first 64 


bits of message block i are denoted M\”, the next 64 bits are M{” , and so on up to M\?. 


5.3. Setting the Initial Hash Value (H) 


Before hash computation begins for each of the secure hash algorithms, the initial hash value, 
H, must be set. The size and number of words in H depends on the message digest size. 


5.3.1. SHA-1 
For SHA-1, the initial hash value, H®, shall consist of the following five 32-bit words, in hex: 


Hy =. e7A523001 
H{® = efcdab89 
H® = 98badcfe 
He = WO325476 
H®) = .c3d2e1£0. 


5.3.2 SHA-256 


For SHA-256, the initial hash value, H®, shall consist of the following eight 32-bit words, in 
hex: 


HS? = 6a09e667 
H{ = bb67ae8s5 
HY’ = 3c6ef372 
HS!’ = ab5aff53a 
Hl = Si0es 218 
H® = 9b05688c 
H{?’ = 1£83d9ab 
H® = 5be0cd19. 


13 


These words were obtained by taking the first thirty-two bits of the fractional parts of the square 
roots of the first eight prime numbers. 


5.3.3 SHA-384 
For SHA-384, the initial hash value, H?, shall consist of the following eight 64-bit words, in 
hex: 

HS? = cbhbb9d5dc1059ed8 

H{ = 629a292a367cd507 

H{? = 9159015a3070dd17 





HS? = 152fecd8£70e5939 
H{ = 67332667f£fc00b31 
H® = 8eb44a8768581511 
H{? = db0c2e0d64f£98fa7 
H® = 47b5481dbefa4fad4. 


These words were obtained by taking the first sixty-four bits of the fractional parts of the square 
roots of the ninth through sixteenth prime numbers. 


5.3.4 SHA-512 
For SHA-512, the initial hash value, H®, shall consist of the following eight 64-bit words, in 
hex: 

H\? = 6a09e667f3bcc908 

H{® = bb67ae8584caa73b 

H® = 3c6ef372fe94F82b 





Hy’ = a54ff53a5f1036F1 
H® = 510e527fade682d1 
H® = 9b05688c2b3e6cl1f 
H{® = 1£83d9abfb41bd6b 
H® = 5be0cd19137e2179. 


These words were obtained by taking the first sixty-four bits of the fractional parts of the square 
roots of the first eight prime numbers. 
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6. SECURE HASH ALGORITHMS 


In the following sections, SHA-512 is described before SHA-384. That is because the SHA-384 
algorithm is identical to SHA-512, with the exception of using a different initial hash value and 
truncating the final hash value to 384 bits. 


For each of the secure hash algorithms, there may exist alternate computation methods that yield 
identical results; one example is the alternative SHA-1 computation described in Sec. 6.1.3. 
Such alternate methods may be implemented in conformance to this standard. 


6.1 SHA-1 


SHA-1 may be used to hash a message, M, having a length of ¢ bits, where 0< ¢<2%. The 
algorithm uses 1) a message schedule of eighty 32-bit words, 2) five working variables of 32 bits 
each, and 3) a hash value of five 32-bit words. The final result of SHA-1 is a 160-bit message 
digest. 


The words of the message schedule are labeled Wo, Wj,..., W79. The five working variables are 
labeled a, b, c, d, and e. The words of the hash value are labeled H§”, H(”,...,H{, which will 


0°? 
hold the initial hash value, H, replaced by each successive intermediate hash value (after each 
message block is processed), H, and ending with the final hash value, H, SHA-1 also uses a 
single temporary word, 7. 


Appendix A gives several detailed examples of SHA-1. 


6.1.1 SHA-1 Preprocessing 


1. Pad the message, M, according to Sec. 5.1.1; 


2. Parse the padded message into N 512-bit message blocks, M?, M®, Abs M™, 
according to Sec. 5.2.1; and 


3. Set the initial hash value, H®, as specified in Sec. 5.3.1. 


6.1.2 SHA-1 Hash Computation 


The SHA-1 hash computation uses functions and constants previously defined in Sec. 4.1.1 and 
Sec. 4.2.1, respectively. Addition (+) is performed modulo 2°?. 


After preprocessing is completed, each message block, M, M® or if M” , is processed in order, 
using the following steps: 


Fori=1toWN: 


{ 
1. Prepare the message schedule, { W,}: 
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M” O<r<l5 


ROTL'(W,, ®W,_s ®W, 14 OW, 16) 16<1<79 


2. Initialize the five working variables, a,b, c, d, and e, with the (i- 1)“ hash value: 


a=H"” 
b= Hi 
ean 
ZS 
e= HH? 
3. Fort=0 to 79: 

{ 
T = ROTL’(a) + f,(b,c,d) +e+ K,+W, 
e=d 
d=c 
c = ROTL**(b) 
b=a 
a=T 

} 


4. Compute the i” intermediate hash value H: 


HY =a+H\” 

HY =b+H\ 

Hy =erHl 

Heda)? 

HY =e+Hf” 
} 


After repeating steps one through four a total of N times (i.e., after processing M), the resulting 
160-bit message digest of the message, M, is 


Ha ae a 
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6.1.3. Alternate Method for Computing a SHA-1 Message Digest 

The SHA-1 hash computation method described in Sec. 6.1.2 assumes that the message schedule 
Wo, Wi,..., W79 is implemented as an array of eighty 32-bit words. This is efficient from the 
standpoint of the minimization of execution time, since the addresses of W,.3,..., Wz-16 in step (2) 
of Sec. 6.1.2 are easily computed. 


However, if memory is limited, an alternative is to regard {W;} as a circular queue that may be 
implemented using an array of sixteen 32-bit words, Wo, Wi,..., Wis. The alternate method that is 
described in this section yields the same message digest as the SHA-1 computation method 
described in Sec. 6.1.2. Although this alternate method saves sixty-four 32-bit words of storage, 
it is likely to lengthen the execution time due to the increased complexity of the address 
computations for the {W,} in step (3). 


For this alternate SHA-1 method, let MASK = 0000000€f (in hex). As in Sec. 6.1.1, addition is 
performed modulo 2°. Assuming that the preprocessing as described in Sec. 6.1.1 has been 
performed, the processing of M is as follows: 


Fori=1toN: 


{ 
1. Fort=Oto 15: 


{ 
W,=M° 
} 


2. Initialize the five working variables, a, b, c, d, and e, with the (i-1)“ hash value: 


a=He? 
bp=ae 
6é=He 2 
iS” 
ea,” 


3. Fort=Oto 79: 


{ 
s=tA MASK 


If t=16 then 
{ 
Ww, = ROTL' (W 413)a MASK ® W 548) aMasK 7) W 542) aMASK ® W, ) 
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T = ROTL’ (a) + f,(b,c,d) +e+ K, +W, 


e=d 
d=c 
c = ROTL**(b) 
b=a 
a=T 


4. Compute the i” intermediate hash value H“: 
p 


HY =aeH; ” 
HO =b+H\ 
HY =c+Hy” 
AO Sadan? 
HY =é+Hs 


} 


After repeating steps one through four a total of N times (i.e., after processing M™”), the resulting 
160-bit message digest of the message, M, is 


ND) |] 7. 2D ]| 7 | ZO” 
Ho" A" fs | YH. 


6.2 SHA-256 


SHA-256 may be used to hash a message, M, having a length of ¢ bits, where 0 < <2. The 
algorithm uses 1) a message schedule of sixty-four 32-bit words, 2) eight working variables of 32 
bits each, and 3) a hash value of eight 32-bit words. The final result of SHA-256 is a 256-bit 
message digest. 


The words of the message schedule are labeled Wo, Wi,..., Wo3. The eight working variables are 
labeled a, b, c, d, e, f, g, and h. The words of the hash value are labeled H{?,H(”,...,H., 


which will hold the initial hash value, H, replaced by each successive intermediate hash value 
(after each message block is processed), HH, and ending with the final hash value, H™. SHA- 
256 also uses two temporary words, 7; and 7>. 


Appendix B gives several detailed examples of SHA-256. 
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6.2.1 SHA-256 Preprocessing 


1. Pad the message, M, according to Sec. 5.1.1; 


2. Parse the padded message into N 512-bit message blocks, M?, Mm, ..., MY, 
according to Sec. 5.2.1; and 


3. Set the initial hash value, H®, as specified in Sec. 5.3.2. 


6.2.2 SHA-256 Hash Computation 


The SHA-256 hash computation uses functions and constants previously defined in Sec. 4.1.2 
and Sec. 4.2.2, respectively. Addition (+) is performed modulo 2°”. 


After preprocessing is completed, each message block, M, M®? es M” , is processed in order, 
using the following steps: 


Fori=1toN: 
{ 


1. Prepare the message schedule, { W,}: 


M O<1<I5 


69 (W_)+W_, +6 PW _.)+W_,, 16<1t<63 


2. Initialize the eight working variables, a, b, c, d, e, f, g, and h, with the (@-1)" hash 


value: 
_ 77 (A) 
a=H, 
_ pil) 
b=H, 
_ yA) 
c=H, 
_ pid 
d=H, 
_ zy) 
e=H, 
_ pi) 
f =H; 
(-1) 
g=H, 
_ gy) 
h=dH, 


3. Fort=0 to 63: 
{ 
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T,=h+Y" (e) + Che, fag) + KP! +W 


t 


T, =" (a) + Maj(a,b,c) 


h=8 
eas 
J =e 
e=d+T, 
d=c 
c=b 
b=a 
a=T,+T, 


} 


4. Compute the i” intermediate hash value H: 


AY Sat 
HY =b+HY 
Hy =ce Hy? 
He =aeH?” 
H) =e+Ht” 
AS = fra 
HO =9+He” 
Hy) =h+HY” 


} 


After repeating steps one through four a total of N times (i.e., after processing M), the resulting 
256-bit message digest of the message, M, is 


Nr] 7.) |] MD] |] ||.) |] VND 
Hy ea” a a aS ta” 


6.3 SHA-512 


SHA-512 may be used to hash a message, M, having a length of ¢ bits, where 0 < ¢ <2'**. The 
algorithm uses 1) a message schedule of eighty 64-bit words, 2) eight working variables of 64 
bits each, and 3) a hash value of eight 64-bit words. The final result of SHA-512 is a 512-bit 
message digest. 


The words of the message schedule are labeled Wo, Wi,..., W79. The eight working variables are 
labeled a, b, c, d, e, f, g, and h. The words of the hash value are labeled H§?,H(”,...,H., 
which will hold the initial hash value, H©, replaced by each successive intermediate hash value 
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(after each message block is processed), H, and ending with the final hash value, H). SHA- 
512 also uses two temporary words, 7; and 7>. 


Appendix C gives several detailed examples of SHA-512. 
6.3.1 SHA-512 Preprocessing 


1. Pad the message, M, according to Sec. 5.1.2; 


2. Parse the padded message into N 1024-bit message blocks, M, M®, ses MM, 
according to Sec. 5.2.2; and 


3. Set the initial hash value, H®, as specified in Sec. 5.3.4. 


6.3.2 SHA-512 Hash Computation 


The SHA-512 hash computation uses functions and constants previously defined in Sec. 4.1.3 
and Sec. 4.2.3, respectively. Addition (+) is performed modulo 2%, 


After preprocessing is completed, each message block, M, M, ee MM, is processed in order, 
using the following steps: 


Fori=1toWN: 
{ 


1. Prepare the message schedule, { W;}: 


M” O<r<l5 


ot (W._,)+W,_, +o) (W,45)+W4g 1651579 


2. Initialize the eight working variables, a, b, c, d, e, f, g, and h, with the (i-1)* hash 


value: 
a=He 
b= HO 
c=H& 
d=He 
é=He? 
f=Hs 
gH 
h=Hi 


3. Fort=0to 79: 
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T,=h+Y "(e+ Chile, f.g)+ KP +W, 
T, =), (a) + Maj(a,b, c) 


h=g 
Say 
f =e 
e=d+T, 
d=c 
c=b 
b=a 
a=T,+T, 


4. Compute the i" intermediate hash value H: 


Hy =atHy” 
AY =ben? 
Hy Scorn 
HO Sadan” 
HY =e+Hy” 
HY =f+Hs 
HO =9+He” 
HOSheH 


} 


After repeating steps one through four a total of N times (i.e., after processing M), the resulting 
512-bit message digest of the message, M, is 


| NDI] 7D |] ND] ZOD | 7.) |[ 7. | OV) 
ce a a 


6.4 SHA-384 


SHA-384 may be used to hash a message, M, having a length of / bits, where 0 < ¢ <2'**. The 
algorithm is defined in the exact same manner as SHA-512 (Sec. 6.3), with the following two 
exceptions: 


1. The initial hash value, H®, shall be set as specified in Sec. 5.3.3; and 
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2. The 384-bit message digest is obtained by truncating the final hash value, H, to its 
left- most 384 bits: 


(|| ND] ry D]] 7M) |] ZOD] OV) 
0S |S | HS” 


Appendix D gives several detailed examples of SHA-384. 
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APPENDIX A: SHA-1 EXAMPLES 


This appendix is for informational purposes only and is not required to meet the standard. 


A.1. SHA-1 Example (One-Block Message) 
Let the message, M, be the 24-bit (¢= 24) ASCII string "abc", which is equivalent to the 
following binary string: 


01100001 01100010 01100011. 


The message is padded by appending a 'L" bit, followed by 423 '0" bits, and ending with the 
hex value 00000000 00000018 (the two 32-bit word representation of the length, 24). Thus, 
the final padded message consists of one block (N = 1). 


For SHA-1, the initial hash value, H, is 


He = 61452301 
H{®? = efcdab89 
HS’ = 98badcfe 
HY) = 10325476 
H{® = c3d2e1f0. 


The words of the padded message block are then assigned to the words Wo,...,W1s of the message 
schedule: 


Wo = 61626380 Wg = 00000000 
W,; = 00000000 Wo = 00000000 
W. = 00000000 Wio 00000000 
W3 = 00000000 Wi = 00000000 
Ws, = 00000000 Wi2 00000000 
Ws = 00000000 W3 00000000 
We = 00000000 Wi 00000000 
W; = 00000000 Wis 00000018. 


The following schedule shows the hex values for a, b, c, d, and e after pass t of the “for t = 0 to 
79” loop described in Sec. 6.1.2, step 4. 


a b c d e 
t= 0: 0116£c33 67452301 Thf36ae2 98badcfe 10325476 
t= 1: 8990536d 0116£c¢33 59d148c0 Thf36ae2 98badcfe 
t= 2: al390£08 8990536d c045bf0c 59d148c0 Tbf36ae2 
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~sme me SRO mB SB Be BR SB Be Be BR SB SB SB BR BR RB RB BR RB RB RB RB RB RB RB RB RB RB RB eB BB RR RB BB RB RB BR RB RB RB SR RS 


SowmraanazwW 


ll: 
12: 
13: 
14: 
15: 
16: 
17: 
18 : 
19 : 
20 : 
21: 
22: 
23: 
24 : 
25: 
26 : 
27 : 
28 : 
29 : 
30: 
31: 
32: 
33: 
34 : 
35 : 
36: 
37: 
38: 
39: 
40 : 
41: 
42: 
43: 


45 : 
46 : 
47 : 
48 : 
49 : 
50 : 
51: 
52: 
53: 
54: 
55: 
56: 
57: 
58 : 


cdd8ellb 
cfd499de 
3f£fc7ca40 
993e30c1 
9e8c07d4 
4b6ae328 
8351£929 
fbda9e89 
63188fe4 
4607b664 
9128f695 
196bee77 
20bdd62f 
4e925823 
82aa6728 
dc64901d 
fd9eld7d 
la37b0ca 
33a23bfe 
21283486 
d541f12d 
c7567dc6 
48413ba4 
be35fbd5 
4aa84d97 
8370b52e 
c5fbaf5d 
1267b407 
3b845d33 
046faa0a 
2c0ebcl1l 
21796ad4 
dcbbbO0cb 
Of511£d8 
dc63973£ 
4c986405 
32delcba 
fc87dedf 
970a0d5c 
7£193dc5 
eelblaaf 
40f28e09 
lc5lelf2 
a01b846c 
bead02ca 
baf39337 
120731c5 
641db2ce 
3847ad66 
e490436d 
27e9f1d8 
7o71£76d 
5e6456af 
c846093f 
d262f£f50 
09d785fd 


al390£08 
cdd8ellb 
cfd499de 
3fc7ca40 
993e30cl1 
9e8c07d4 
4b6ae328 
8351f£929 
fbda9e89 
63188fe4 
4607b664 
9128f695 
196bee77 
20bdd62£ 
42925823 
82aa6728 
dc64901d 
fd9eld7d 
la37b0ca 
33a23bfec 
21283486 
d541f£12d 
c7567dc6 
48413ba4 
be35fbd5 
4aa84d97 
8370b52e 
c5fbaf5d 
1267b407 
3b845d33 
046faa0a 
2c0ebcll 
21796ad4 
dcbbbO0cb 
O0f511£d8 
dc63973£ 
4c986405 
32delcba 
fc87dedf 
970a0d5c 
7£193dc5 
eelblaaf 
40f28e09 
lc5lelf2 
a01b846c 
bead02ca 
baf39337 
120731c5 
641db2ce 
3847ad66 
e490436d 
27e9f1d8 
7b71£76d 
5e6456af 
c846093f 
d262ff50 
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626414db 
284e43c2 
£3763846 
b3£52677 
Off1£290 
664£8c30 
27a301£5 
12dab8ca 
60d47e4a 
Tefoa7a2 
18c623£9 
1181ed99 
644a3da5 
c65afb9d 
c82£758b 
d3a49608 
20aa99ca 
77192407 
T£67875£ 
868dec32 
Oce88eff 
884a0d21 
75507c4b 
b1ld59£71 
12104ee9 
6f£8d7ef5 
d2aal365 
addc2d4b 
71 7eebd7 
c499ed01 
ceell74c 
811lbea82 
4b03af04 
085e5ab5 
£72eec32 
03d447£6 
£718e5cf 
53261901 
8cb7872e 
f£21E7b7 
25¢28357 
5£c64£71 
fb86cb6ab 
503ca382 
8714787c 
2806el11b 
afab40b2 
eebce4cd 
4481cc71 
99076cb3 
8elleb59 
792410db 
09fa7c76 
5edc7ddb 
d79915ab 
£211824f 


c045bf0c 
626414db 
284e43c2 
£3763846 
b3£52677 
Off1£290 
664£8c30 
27a301£5 
12dab8ca 
60d47e4a 
Jef6a7a2 
18c623f9 
1181ed99 
644a3da5 
c65afb9d 
c82£758b 
d3a49608 
20aa99ca 
77192407 
TEO7875£ 
868dec32 
Oce88efFf 
884a0d21 
75507c4b 
b1d59f71 
12104ee9 
6f£8d7ef5 
d2aa1365 
addc2d4b 
717eebd7 
c499ed01 
ceell74c 
81llbea82 
4b03af04 
085e5ab5 
£72eec32 
03d447£6 
£718e5cf 
53261901 
8cb7872e 
f£21E7b7 
25028357 
5£c64£71 
fb86cb6ab 
503ca382 
8714787c 
2806el11b 
afab40b2 
eebce4cd 
4481cc71 
99076cb3 
8elleb59 
792410db 
O9fa7c76 
5edc7ddb 
d79915ab 


59d148c0 
c045bf0c 
626414db 
284e43c2 
£3763846 
b3£52677 
Off1£290 
664£8c30 
27a301£5 
12dab8ca 
60d47e4a 
Jefoala2 
18c623f9 
1181led99 
644a3da5 
c65afb9d 
c82£758b 
d3a49608 
20aa99ca 
77192407 
7£E67875£ 
868dec32 
Oce88efFf 
884a0d21 
75507c4b 
b1d59£f71 
12104ee9 
6f£8d7ef5 
d2aal365 
addc2d4b 
717eebd7 
c499ed01 
ceell74c 
811lbea82 
4b03af04 
085e5ab5 
£72eec32 
03d447£6 
£718e5cf 
53261901 
8cb7872e 
f£21£7b7 
25¢c28357 
5£c64£71 
fb86cb6ab 
503ca382 
8714787c 
2806e11b 
afab40b2 
eebce4cd 
4481cc71 
99076cb3 
8elleb59 
792410db 
O09fa7c76 
5edc7ddb 


= .59s 3£52de5a 09d785fd 3498bf£d4 £211824f d79915ab 
t= 60: d756c147 3£52de5a 4275e17£ 3498bfd4 £211824f 
t= 61: 548c9cb2 d756c147 8£d4b796 4275el7£ 3498bf£d4 
t= 62: b66c020b 548c9cb2 £5d5b051 8£d4b796 4275el17£ 
t= 63: 6b61c9el bo66c020b 9523272c £5d5b051 8£d4b796 
t= 64: 19dfa7ac 6b61c9el ed9b0082 95232726 £5d5b051 
t= 65: 101655£9 19dfa7ac 5ad87278 ed9b0082 9523272c 
t = 66: Oc3df£2b4 101655£9 0677e9eb 5ad87278 ed9b0082 
t = 67: 78dd4d2b Oc3df2b4 4405957e 0677e9eb 5ad87278 
t= 68: 497093c0 78dd4d2b 030f7cad 4405957e 0677e9eb 
t= 69: 3£2588c2 497093c0 de37534a 030f7cad 4405957e 
t= 70: c199£8c7 3£2588c2 125c24£0 de37534a 030f7cad 
BST 39859de7 cl199f8c7 8£c96230 125c24£0 de37534a 
b= 12 edb42de4 39859de7 £0667e31 8£c96230 125c24£0 
a oe 11793f6f£ edb42de4 ce616779 £0667e31 8£c96230 
t= 74: 5ee76897 11793f£6£ 3b6d0b79 ce616779 £0667e31 
213s 63f7dab7 5ee76897 c45e4fdb 3b6d0b79 ce616779 
t = 76: a079b7d9 63£7dab7 d7b9da25 c45e4fdb 3b6d0b79 
BS ITs 860d21cc a079b7d9 d8fdfead d7b9da25 c45e4fdb 
t= 78: 5738d5el1 860d21cc 68le6dte d8fdfead d7b9da25 
t= 79: 42541635 5738d5el1 21834873 68le6df6 d8fdfead 


oF 


That completes the processing of the first and only message block, M“’’. The final hash value, 
His calculated to be 





H§” = 67452301 + 42541b35 = a9993e36 
H\ = efcdab89 + 5738d5el = 4706816a 
H = 98badcfe + 21834873 = ba3e2571 
H{” = 10325476 + 68le6df6 = 7850c26c 
H = c3d2e1f0 + d8fdf6ad = 9cd0d89d. 


The resulting 160-bit message digest is 


a9993e36 4706816a ba3e2571 7850c26c I9cd0d8 9d. 


A.2. SHA-1 Example (Multi-Block Message) 
Let the message, M, be the 448-bit (/ = 448) ASCTI string 


"abcdbcdecdefdefgefghfghighijhijkijkljkImklImnImnomnopnopq". 
The message is padded by appending a 'L" bit, followed by 511 '0" bits, and ending with the 
hex value 00000000 000001c0 (the two 32-bit word representation of the length, 448). 
Thus, the final padded message consists of two blocks (N = 2). 


For SHA-1, the initial hash value, H, is 


27 


67452301 


= efcdab89 


98badcfe 
10325476 
c3d2el1f0. 


The words of the first padded message block, M“”, are then assigned to the words Wo,...,Wis of 
the message schedule: 


61626364 
62636465 
63646566 
64656667 
65666768 
66676869 
6768696a 
68696ab6b 


696a6b6c 
6ab6b6c6d 
6b6c6d6e 
6c6d6e6f 
6d6e6£70 
6e6f£7071 
80000000 
00000000. 


The following schedule shows the hex values for a, b, c, d, and e after pass t of the “for t = 0 to 
79” loop described in Sec. 6.1.2, step 4. 


~mO me me SBR Be BR BR Be Be Be Be Be Be Be BRB BeBe Be BBB BH HS 


WoW a WW Wott ttt tt 
N 
i) 


— 
SOANDNHSWNF CO 


NON RR RR RR RR 
FP OoWmWrAaANBRWN Ke 


NNN 
nBR Ww 


a 


0116fc17 
ebf3b452 
5109913a 
2c4f6eac 
33f4ae5b 
96b85189 
db04cb58 
45833f0f 
c565c35e 
6350afda 
8993ea77 
el9ecaa2 
8603481le 
32£94a85 
b2e7a8be 
42637639 
6b068048 
426b9c35 
944b1bd1 
6c445652 
95836da5 
09511177 
e2b92dc4 
£d224575 
eeb82d9a 
5al42cla 


b 


67452301 
0116fc17 
ebf3b452 
5109913a 
2c4f6eac 
33f4ae5b 
96b85189 
db04cb58 
45833£0£ 
c565c35e 
6350afda 
8993ea77 
el9ecaa2 
8603481le 
32£94a85 
b2e7a8be 
42637639 
6b068048 
426b9c35 
944b1bd1 
6c445652 
95836da5 
09511177 
e2b92dc4 
£d224575 
eeb82d9a 


28 


c 


Tof36ae2 
59d148c0 
c045bf£05 
bafced14 
9442644e 
Ob13dbab 
ccfd2b96 
65ae1462 
36c132d6 
d160cfc3 
b15970d7 
98d42bf6 
e264fa9d 
b867b2a8 
al80d207 
4cbe52al 
acb9ea2f 
5098df8e 
lacla012 
509ae70d 
6512c6f4 
9b111594 
6560db69 
c254445d 
38ae4b71 
7£48915d 


d 


98badcfe 
Tof36ae2 
59d148c0 
c045bf£05 
bafced14 
9442644e 
Ob13dbab 
ccfd2b96 
65ae1462 
36c132d6 
d160cfc3 
b15970d7 
98d42bf6 
e264fa9d 
b867b2a8 
al80d207 
4cbe52al 
acb9ea2Ff 
5098df8e 
lacla012 
509ae70d 
6512c6f4 
9b111594 
6560db69 
c254445d 
38ae4b71 


e 


10325476 
98badcfe 
Tof36ae2 
59d148c0 
c045bf05 
bafced14 
9442644e 
Ob13dbab 
ccfd2b96 
65ael462 
36c132d6 
d160cfc3 
b15970d7 
98d42bf6 
e264fa9d 
b867b2a8 
al80d207 
4Acbe52al 
acb9ea2f 
5098df8e 
lacla012 
509ae70d 
6512c6£4 
9b111594 
6560db69 
c254445d 


~~ me me me SMO SB SB Be BR SB BR SB SB BR HB RB RB RB BB RB BR BR RB RR RB BR RB Be RB RB RB RR BB RB RB RB BR RO RS 


26: 
27 : 
28 : 
29 : 
30: 
31: 
32: 
33: 
34 : 
35 : 
36 : 
37 : 
38 : 
39 : 
40 : 
41: 
42 : 
43: 


45 : 
46 : 
47 : 
48 : 
49 : 
50 : 
51: 
52-2 
53: 
54: 
55: 
56: 
57: 
58 : 
59 : 
60 : 
61 : 
62: 
63: 


65: 
66 : 
67 : 
68 : 
69 : 
70 : 
71: 
I2°: 
J3°% 
74 : 
75: 
76: 
77: 
78 : 
719 : 


2972£7c7 
d526a644 
e1122421 
05b457b2 
a9c84bec 
52e31£f60 
5af3242c 
31c756a9 
e9ac987Tc 
ab7c32ee 
5933fc99 
43£87ae9 
24957£22 
adeb7478 
d70e5010 
79bcfb08 
£9bcb8de 
633e9561 
98clea64 
c6ea24le 
a2ad4f02 
c8a69090 
88341600 
7e846f£58 
86e358ba 
8d2e76c8 
ce892e10 
edea95b1 
36d1230a 
776c3910 
a681b723 
ac0a794F£ 
£03d3782 
9ef775c3 
36254b13 
4080d4dc 
2bfaf7as8 
513£9ca0 
e5895c81 
1037d2d5 
14a82da9 
6dl7c9fd 
2c7bO07bd 
fdfeefft 
112b96e3 
84065712 
ab89fb71 
c5210e35 
352da9f4b 
laQdeOe0a 
d0d47349 
ad38620d 
d3ad7c25 
8ce34517 


5al42cla 
2972£7c7 
d526a644 
e1122421 
05b457b2 
a9c84bec 
52e31£60 
5af3242c 
31c756a9 
e9ac987c 
ab7c32ee 
5933f£c99 
43f87ae9 
24957£22 
adeb7478 
d70e5010 
79bcfb08 
£9bcb8de 
633e9561 
98clea64 
c6ea24le 
a2ad4f02 
c8a69090 
88341600 
7e846£58 
86e358ba 
8d2e76c8 
ce892e10 
edea95bl1 
36d1230a 
776c3910 
a681b723 
ac0a794Ff£ 
£03d3782 
9ef775c3 
36254b13 
4080d4dc 
2bfaf7a8 
513£9ca0 
e5895c81 
1037d2d5 
14a82da9 
6dl7c9fd 
2c7b07bd 
fdfeefff 
112b96e3 
84065712 
ab89fb71 
c5210e35 
352d9f4b 
laOe0e0a 
d0d47349 
ad38620d 
d3ad7c25 


29 


bbae0b66 
96850b06 
ca5cbdfl 
3549a991 
78448908 
816d15ec 
2a7212f£b 
14b8c7d8 
16bcc90b 
4c71ld5aa 
3a6b261f 
aadf0cbb 
564cf££26 
50feleba 
89255fc8 
2Zb7addle 
35c39404 
le6f3ec2 
be6f2e37 
58cfa558 
26307a99 
b1ba8907 
a8ab53c0 
3229a424 
22000580 
1lfallbd6 
alb8d62e 
234b9db2 
33a24b84 
To7aa56c 
8db448c2 
lddb0e44 
e9a06dc8 
eb029e53 
bc0f4de0 
e7bddd70 
cd8952c4 
10203537 
Oafebdea 
144fe728 
79625720 
440df4b5 
452a0b6a 


5b4 


SEZ TE 


4bleclef 
f£f7dbbff 


c44 


ae5b8 


al0195c4 
6ae27edc 


714 
cd4 


8438d 
bo7d2 


86838382 
74351cd2 





6b4 


e1883 


7£48915d 
bbae0b66 
96850b06 
ca5cbhdfl 
3549a991 
78448908 
816d15ec 
2a7212fb 
14b8c7d8 
16bcc90b 
4c71id5aa 
3a6b261f 
aadf0cbb 
564cf£26 
50feleba 
89255fc8 
2Zb7addle 
35c39404 
le6f3ec2 
be6f£2e37 
58cfa558 
26307a99 
b1ba8907 
a8ab53c0 
3229a424 
22000580 
1lfallbd6 
alb8d62e 
234b9db2 
33a24b84 
To7aa56c 
8db448c2 
lddb0e44 
e9a06dc8 
eb029e53 
bc0f4de0 
e7bddd70 
cd8952c4 
10203537 
Oafebdea 
144fe728 
79625720 
440df£4b5 
452a0b6a 
5b45£27£ 
Ableclef 
fft7dbbff 
c44ae5b8 
al0195c4 
6ae27edc 
7148438d 
cd4b67d2 
86838382 
74351cd2 


38ae4b71 
7£48915d 
bbae0b66 
96850b06 
caS5cbhdfl 
3549a991 
78448908 
816d1l5ec 
2a7212£fb 
14b8c7d8 
16bcc90b 
4c71ld5aa 
3a6b261f 
aadf0cbb 
564cf£26 
50feleba 
89255fc8 
2Zb7addle 
35c39404 
le6éf3ec2 
be6f£2e37 
58cfa558 
26307a99 
b1ba8907 
a8ab53c0 
3229a424 
22000580 
lfallbd6 
alb8d62e 
234b9db2 
33a24b84 
ToT7aas6éc 
8db448c2 
lddb0e44 
e9a06dc8 
eb029e53 
bc0f4de0 
e7bddd70 
cd8952c4 
10203537 
Oafebdea 
144fe728 
79625720 
440df£4b5 
452a0b6a 
5b45£27£ 
Ableclef 
f£7dbbff 
c44ae5b8 
al0195c4 
6ae27edc 
7148438d 
cd4b67d2 
86838382 


That completes the processing of the first message block, M“”’. The first intermediate hash value, 
H'”, is calculated to be 


Hy 
a 
Le 
He 
HD 


67452301 
efcdab89 
98badcfe 
10325476 
c3d2e1f0 





8ce34517 
d3ad7c25 
6b4e1883 
74351cd2 
86838382 





£4286818 
c37b27ae 
O408£581 
84677148 


4a566572. 


The words of the second padded message block, M?, are then assigned to the words Wo,...,W15 
of the message schedule: 


Wo 
Wi 


00000000 
00000000 
00000000 
00000000 
00000000 
00000000 
00000000 
00000000 


Ws 

Wo 

Wio 
Wi 
Wi 
Wi3 
Wi4 
Wis 


00000000 
00000000 
00000000 
00000000 
00000000 
00000000 
00000000 
000001c0. 


The following schedule shows the hex values for a, b, c, d, and e after pass t of the “for t = 0 to 
79” loop described in Sec. 6.1.2, step 4. 


ll 
— 
SOANDNFWNF CO 


_~ _~_— oso ™ ~— os | a o™ ~_— os ™ ~_— oso ™ “~— os | “~— os | 
Hou We ow ou tw ot ab a a 
NOR RRR RR RR 
GFPoMmAIAN PWN Ke 


I 
N 
= 


a 


2daf257e9 
4d3dc58f 
c352bb05 
eef743c6 
41e34277 
5443915c 
e7f£a0377 
c6946813 
fddeldel 
b8538aca 
6ba94f63 
43a2792£ 
fecd7bbf 
a2604ca8 
258b0baa 
d9772360 
5507db6e 
a51b58be 
c2eb709£ 
d8992153 
37482£5£ 
ee8700bd 


b 


£4286818 
2df257e9 
4d3dc58f£ 
c352bb05 
eef743c6 
41634277 
5443915c 
e7£a0377 
c6946813 
fddeldel 
b8538aca 
6ba94f63 
43a2792£ 
fecd7bbf 
a2604ca8 
258b0baa 
d9772360 
5507db6e 
a51b58be 
c2eb709£ 
d8992153 
37482£5f 


c 


bOdec9¥eb 
3d0ala06 
4b7c95fa 
d34£7163 
70d4aecl 
bbbdd0f1 
d078d09d 
1510e457 
£9fe80dd 
fla51a04 
7£778778 
ael4e2b2 
daea53d8 
dd0e89e4b 
ffb35eef 
2898132a 
8962c2ea 
365dc8d8 
9541f£6db 
2946d62f 
fObadc27 
£6264854 


30 


d 


O408f581 
bO0dec9eb 
3d0ala06 
4b7c95fa 
d34£7163 
70d4aecl 
bbbdd0f1 
d078d09d 
1510e457 
£9fe80dd 
fla51a04 
7£778778 
ael4e2b2 
daea53d8 
d0e89e4b 
ffb35eef 
2898132a 
8962c2ea 
365dc8d8 
9541f6db 
2946d62f 
fObadce27 


e 


84677148 
0408f581 
bOdec9eb 
3d0ala06 
4b7c95fa 
d34£7163 
70d4aecl 
bbbdd0f1 
d078d09d 
1510e457 
£9fe80dd 
fla51a04 
7£778778 
ael4e2b2 
daea53d8 
dd0e89e4b 
ffb35eef 
2898132a 
8962c2ea 
365dc8d8 
9541f6db 
2946d62f 


~~ sme me mB SRB SB BR Be SB Be Be Be SB BR SB Be BR RB RB RB BR BR BRB RB BR RB RB RB RB RB RB RB eB RB RB RB BB RB RB BR RB RB RB RB RS 


22: 
23: 
24 : 
25: 
26: 
27: 
28: 
29: 
30 : 
31: 
32: 
33: 
34: 
35 : 
36 : 
37: 
38 : 
39 : 
40 : 
41: 
42: 
43: 


45 : 
46 : 
47 : 
48 : 
49 : 
50 : 
51: 
52: 
53: 
54: 
55: 
56: 
57: 
58 : 
59 : 
60 : 
61 : 
62: 
63: 


65: 
66 : 
67 : 
68 : 
69 : 
70 : 
Tle 
72: 
73: 
74 : 
75: 
76: 
77: 


9ad594b9 
8fbaa5b9 
88f£b5867 
eec50521 
50bce434 
5c416daf 
2429be5f 
Oa2fb108 
17986223 
8a4af384 
6b629993 
f£15£04£3 
295cc25b 
696da404 
cef5ael2 
87d5b80c 
84e2a5f2 
03bb6310 
c2d8sft75£ 
bfb25768 
28589152 
ecld3d61 
3caed7Jaf 
c3d033ea 
7316056a 
46£93b68 
dc8e7£26 
850d41l1c 
7e4672c0 
89fbd41d 
1797e228 
431d65bc 
Zbdbb8cb 
6da72e7£ 
a8495a9b 
e785655a 
5b086c42 
a65818f7 
Jaabl1l01b 
93614c9c 
£66d9bf4 
d504902b 
60a9dab62 
8b687819 
083e90c3 
£6226bbf£ 
76c0563b 
989dd165 
8b2c7573 
aelb8e7b 
cal840de 
16f£3babb 
d28d83ad 
6bc02dfe 
d3a6e275 
da955482 


ee8700bd 
9ad594b9 
8fbaa5b9 
88£b5867 
eec50521 
50bce434 
5c41l6daf 
242 9be5£ 
Oa2fb108 
17986223 
8a4af384 
6b629993 
£15f04£3 
295cc25b 
696da404 
cef5ael2 
87d5b80c 
84e2a5Ff2 
03bb6310 
c2d8£f75£ 
bfb25768 
28589152 
ecld3d61 
3caed7af 
c3d033ea 
7316056a 
46£93b68 
dc8e7f£26 
850d411c 
7e4672c0 
89fbd41d 
1797e228 
431d65bc 
2bdbb8cb 
6da72e7£ 
a8495a9b 
e785655a 
5b086c42 
a65818f7 
Jaabl0l1b 
93614c9c 
£66d9bf4 
d504902b 
60a9dab62 
8b687819 
083e90c3 
£6226bbE 
76c0563b 
989dd165 
8b2c7573 
aelb8e7b 
cal840de 
16f£3babb 
d28d83ad 
6bc02dfe 
d3a6e275 


31 


c 
7 
6 
6 
e 
7 
1 
d 
c 
0) 
¢ 
2 
d 
f£ 
c 
1 
b 
2 
a 
0 
f£ 
2 
8 
7 


PNOerFWOA 


6 
0 
1 
c 
d 
e 
b 
9 
e 
d 
2 
3 
f£ 
9 
6 
€ 
f£ 
d 
6 
e 
e 
b 
c 
7 
9 


dd20bd7 
balcO2f 
6b5652e 
3eea96e 
23ed619 
bb14148 
42£390d 
7105b6b 
90ab6f97 
28bec42 
5e61888 
292bcel 
ad8a664 
e5/7613¢ 
a573096 
a5b6901 
3bd6b84 
1£56e03 
138a97c 
Oeed8c4 
0b63dd7 
fFec95da 
al62454 
b0O74£58 
f2bb5eb 
O0f40cfa 
cc5815a 
lbe4eda 
7239fc9 
1435047 
£919cb0 
27ef507 
5e5f88a 
0c7596£ 
af6ee32 
b69cb9F 
al256a6 
9e15956 
6c21b10 
996063d 
eaac406 
4085327 
d9b66fd 
541240a 
82a7698 
2dale06 
20£a430 
d889aef 
db0158e 
6277459 
2cbld5c 
b86e39e 
2861037 
5bceeae 
4a360eb 
afO00Ob7£ 





£ 
c 
7 
6 
6 
e 
d 
1 


6264854 
dd20bd7 
balcO2f 
6b5652e 
3eea96e 
23ed619 
bb14148 
42£390d 


d7105b6b 


¢ 
0 
c 
2 


90a6f97 
28bec42 
5e61888 
292bcel 


dad8a664 


£ 
c 
i): 
b 
2 
a 
0 
£ 
2 
8 
7 
c 


1 
6 
0 
1 
c 


eaTeLl3ec 
a573096 
a5b6901 
3bd6b84 
1£56e03 
138a97c 
Oeed8c4 
O0b63dd7 
fFec95da 
al62454 
bO74£58 
f2bb5eb 


lbe4eda 
T239Ec9 
1435047 
£919cb0 
27ef507 
5e5f88a 
0c7596£ 
af6ee32 





db69cb9t 


e 
b 
9 
e 


al256a6 
9e15956 
6c21b10 
996063d 


deaac406 


2 
3 
£ 
9 
6 
Cc 
£ 


485327 
d9b66fd 
541240a 
82a7698 
2dale06 
20fa430 
d889aef 


ddb0158e 


6 
e 
e 
b 
c 
7 


6277459 
2cbld5c 
b86e39e 
2861037 
5bceeae 
4a360eb 


fObadc27 
£6264854 
cdd20bd7 
TealcO02£f 
66b5652e 
63eea96e 
e23ed619 
7bb14148 
142£390d 
d7105b6b 
c90ab6f97 
028bec42 
c5e61888 
2292bcel 
dad8a664 
fc57cl1l3c 
ca573096 
1a5b6901 
b3bd6b84 
21£56e03 
al38a97c 
O0eed8c4 
£0b63dd7 
2fec95da 
8al62454 
7b074£58 
cf2bb5eb 
bOf40cfa 
9cc5815a 
llbe4eda 
b7239fc9 
21435047 
1£919cb0 
627ef507 
O5e5f88a 
10c7596£ 
caf6ee32 
db69cb9Ff 
eal256a6 
b9e15956 
96c21b10 
e996063d 
deaac406 
24d85327 
3d9b66fd 
£541240a 
982a7698 
62dale06 
c20fa430 
£d889aef 
ddb0158e 
66277459 
e2cbld5c 
eb86e39e 
b2861037 
c5bceeae 


78: 58c0aac0 da955482 74e9b89d 9afO00b7E 74a360eb 
719: 906fd62c 58c0aac0 b6a55520 74e9b89d 9afO00b7£ 


t 
t 


That completes the processing of the second and final message block, M”. The final hash value, 
H®, is calculated to be 


H}\” = £4286818 + 906fd62c = 84983e44 
H\ = c37b27ae + 58c0aacd0 = 1c3bd26e 
H® = 0408f581 + b6a55520 = baaedaal 
H{” = 84677148 + 74e9b89d = £95129e5 
H® = 44566572 + 9af00b7£ = e€54670f1. 








The resulting 160-bit message digest is 


84983e44 lc3bd26e baae4aal £95129e5 e54670F1. 


A.3. SHA-1 Example (Long Message) 


Let the message M be the binary-coded form of the ASCII string which consists of 1,000,000 
repetitions of the character “a”. The resulting SHA-1 message digest is 


34aa973c d4c4daa4 f6leeb2b dbad2731 6534016f. 
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APPENDIX B: SHA-256 EXAMPLES 


This appendix is for informational purposes only and is not required to meet the standard. 


B.1 SHA-256 Example (One-Block Message) 


Let the message, M, be the 24-bit (¢= 24) ASCII string "abc", which is equivalent to the 
following binary string: 


01100001 01100010 01100011. 


The message is padded by appending a "1" bit, followed by 423 '0" bits, and ending with the 
hex value 00000000 00000018 (the two 32-bit word representation of the length, 24). Thus, 
the final padded message consists of one block (N = 1). 


For SHA-256, the initial hash value, H, is 


HS? = 6a09e667 
H{® = bb67ae85 
HY = 3666372 
Hi = a54ff53a 
HY S5106527F 
H® = 9b05688c 
HY’ = 1£83d9ab 
H\® = 5be0cd19. 


The words of the padded message block are then assigned to the words Wo,...,Wis of the message 
schedule: 


Wo = 61626380 Ws = 00000000 
W,; = 00000000 Wo = 00000000 
W2 = 00000000 Wio = 00000000 
W3 = 00000000 Wii = 00000000 
Wz = 00000000 Wi2 = 00000000 
Ws = 00000000 Wi3 = 00000000 
We = 00000000 Wi4 = 00000000 
W, = 00000000 Wis = 00000018. 


The following schedule shows the hex values for a, b, c, d, e, f, g, and h after pass t of the “for t 
= 0 to 63” loop described in Sec. 6.2.2, step 4. 


ao 


mame mem Sm Be BeBe SB SB SB Be Be Be RB BR BR BR RB RB RB RB RB RB BB RB RB BB SB RB RB RB RR RB RB RR RR RB SS 


a b c d e f g h 


= 0: S5d6aebcd 6a09eC667 bb67ae85 3cbef372 fa2a4622 510e527£ 9b05688c 1£83d9ab 
= 1: S5a6bad9ad Sdobaebcd 6a09€667 bbo7ae85 78ce/989 fa2a4622 510e527£ Y9b05688c 
= 2: c8c347a7 Sabad9ad HSdb6aebcd 6a09e667 £92939eb 78ce7989 fa2a4622 510e527£ 
= 3: d550f666 c8c347a7 Sabad9ad Sdobaebcd 24€00850 £92939eb 78ce7989 fa2a4622 
= 4: 04409a6a d550f666 c8c347a7 Sabad9ad 43ada245 24e€00850 £92939eb 78ce7989 
= 5: 2b4209f5 04409a6a d550f666 c8c347a7 714260ad 43ada245 24¢€00850 £92939eb 
= 6: €5030380 2b4209f5 04409a6a d550f666 Y9b27a401 714260ad 43ada245 24e00850 
= 7: 85a07b5£ ©€5030380 2b4209f5 04409a6a Ocb657a79 Y9b27a401 714260ad 43ada245 
= 8: 8e04ecb9 85a07b5£ ©€5030380 2b4209f5 32ca2d8c O0c657a79 Y9b27a401 714260ad 
= 9: 8c87346b 8e04ecb9 85a07b5£f ©€5030380 I1cc92596 32ca2d8c Oc657a79 9b27a401 
=10: 4798a3f4 8c87346b 8e04ecb9 85a07b5£f 436b23e8 1cc92596 32ca2d8c O0c657a79 


=11: f71fc5a9 4798a3f4 8c87346b 8e04ecb9 816fd6e9 436b23e8 1cc92596 32ca2d8c 
=12: 87912990 £71fc5a9 4798a3f4 8c87346b 1¢€578218 816fdbe9 436b23e8 1cc92596 
=13: d932eb16 87912990 f71fc5a9 4798a3f4 745a48de 1¢€578218 816fd6e9 436b23e8 
=14: c0645fde d932eb16 87912990 £71fc5a9 Ob92F20c 745a48de 1¢578218 816fdb6e9 
=15: bO0fa238e c0645fde d932eb16 87912990 07590dcd Ob92E20c 745a48de 16578218 
=16: 21lda9a9b bO0fa238e c0645fde d932eb16 8034229c 07590dcd Ob92F20c 745a48de 
=17: c2fbd9d1l 21da9a9b bOfa238e c0645fde 846ee454 8034229c 07590dcd O0b92F20c 
=18 : fel777bb£f c2fbd9dl 21ida9a9b b0fa238e cc899961 846ee454 8034229c 07590dcd 
=19: e1f20c33 fel777bb£f c2fbd9dl1 21lda9a9b b0638179 cc899961 846ee454 8034229c 
=20: 9dc68b63 el1f20c33 fel77bb£f c2fbd9d1 8ada8930 60638179 cc899961 846ee454 
=21: c2606d6d Y9dc68b63 elf20c33 fe777bb£f ©€1257970 8ada8930 60638179 cc899961 
=22: ala3623£ c2606d6d Y9dc68b63 e1f20c33 49f5114a ©€1257970 8ada8930 60638179 
=23 : c5Sd53d8d a7a3623£ c2606d6d Y9dc68be63 aa47c347 49f5114a e€1257970 8ada8930 
=24: 1c2c2838 c5d53d8d avla3623£ c2606d6d 2823ef91 aa47c347 49f5114a ©€1257970 
=25 : cde8037d 1c¢c2c2838 c5Sd53d8d a7a3623£ 14383d8e 2823ef91 aa47c347 49f5114a 
=26: bo62ec4bc cde8037d 1c2c2838 c5d53d8d c74c6516 14383d8e 2823ef91 aa47c347 
=27: 77037528 b62ec4bc cde8037d 1c2c2838 edffbff8 c74c6516 14383d8e 2823ef91 
=28 : 363482c9 77d37528 bo2ec4bc cde8037d 6112a3b7 edffbff8 c74c6516 14383d8e 
=29 : a0060b30 363482c9 77037528 be2ec4bc ade79437 6112a3b7 edffbff8 c74c6516 
=30: e€a992a22 a0060b30 363482c9 77d37528 0109ab3a ade79437 6112a3b7 edffbtf8 
=31 : %73b33bf5 ea992a22 a0060b30 363482c9 ba591112 0109ab3a ade79437 6112a3b7 
=32: 98e12507 73b33bE5 ea992a22 a0060b30 Y9cd9E5£6 ba591112 0109ab3a ade79437 
=33 : fe604d£5 98e12507 73b33bf5 ea992a22 59249dd3 YIcd9F5£F6 ba591112 0109ab3a 
=34: a9a7738c feb604dE5 98e12507 73b33bf5 085f3833 59249dd3 Y9cd9E5£6 ba591112 
=35: 65a0cfe4 a9a7738c feb604d£5 98e12507 £4b002d6 085f3833 59249dd3 YIcd9E5FO 
=36: 41la65cbhl 65a0cfe4 a9a7738c fFfeb04df5 O772a26b F4b002d6 085f3833 59249dd3 
=37: 34df1604 4la6o5cbhl 65a0cfe4 a9a7738cC a507a53d O772a26b £4b002d6 085f3833 
=38 : 6dc57a8a 34df1604 41la65cbhl 65a0cfe4 £0781bc8 a507a53d O772a26b F£4b002d6 
=39: 79ea687a 6dc57a8a 34df1604 4lao5cbl tlefbc0ad £0781bc8 a507a53d 0772a26b 
=40 : d6670766 79ea687a 6dc57a8a 34df£1604 26352d63 lefbc0ad0 £0781bc8 a507a53d 
=4]1 : df4ee52f d6670766 V9eab87a 6dc57a8a 838b2711 26352d63 lefbc0a0 £0781bc8 
=42: IlvaaQOdfe df46652f d6670766 79ea687a decd4715 838b2711 26352d63 lefbc0ad 
=43 : 9d4baf93 l17aa0dfe df46e52f de670766 fda24c2e decd4715 838b2711 26352d63 
= : 26628815 9d4baf93 lvaaO0dfe df46o052f a80f1l1f0 fda24c2e decd4715 838b2711 
=45 : 72ab4b91 26628815 9d4baf93 l17aa0dfe b7755dal a80f11f0 fda24c2e decd4715 
=46: al4cl4b0 72ab4b91 26628815 9d4baft93 d57b94a9 b7755dal a80f11£0 fda24c2e 
=47: 4172328d al14cl4b0 72ab4b91 26628815 fecfObc6 d57b94a9 b7755dal a80f11£0 
=48 : O05757ceb 4172328d al4cl4b0 72ab4b91 bd714038 fecfObc6 d57b94a9 b7755dal 
=49: fllbfaa8 O5757ceb 4172328d al4cl4b0 6e5c390c bd714038 fecfObc6 d57b94a9 
=50: 7a0508al fllbfaa8 O05757ceb 4172328d S52flcc£7? 6e5c390c bd714038 fecf0bc6 
=51: 886e7a22 7a0508al fllbfaa8 O5757ceb 49231lcle 52flcc£7 6e5c390c bd714038 


34 


t =52: 101fd28f 886e7a22 
t =53.: £f£5702fdb 101fd28f 
t =54: 3ec45cdb £5702fdb 
t =55 : 38cc9913 3ec45cdb 
t =56: fcdl887b 38cc9913 
t =57: c062d46£f fcd1887b 
t =58 : £f£fb70472 c062d46f 
t =59: b6ae8fff ffb70472 
t =60: b85e2ce9 bbae8ffFf 
t =61 : 04d24d6c b85e2ce9 
t =62: d39a2165 04d24d6c 
t =63 : 506e3058 d39a2165 


7a0508al fllbfaa8 
886e7a22 T7a0508al 
101f£d28f 886e7a22 
£5702fdb 101fd28f 
3ec45cdb £5702fdb 
38cc9913 3ec45cdb 
fcd1887b 38cc9913 
c062d46f fcdl887b 
f£b70472 c062d46f 
b6éae8ffF ffb70472 
b85e2ce9 bbae8ffFf 
04d24d6c b85e2ce9 


529e7d00 
9f4787c3 
e50elb4f 
54cb266b 
9b5e906c 
7e44008e 
6d83bfcé6 
b21bad3d 
961f4894 
948d25b6 
fb121210 
5ef50f24 


4923l1cle 
529e7d00 
9f4787c3 
e50e1lb4f 
54cb266b 
9b5e906c 
7e44008e 
6d83bfcé6 
b21bad3d 
961f£4894 
948d25b6 
£b121210 


52f1lccf7 
4923l1lcle 
529e7d00 
9f4787c3 
e50elb4f 
54cb266b 
9b5e906c 
7e44008e 
6d83bfcé6 
b21bad3d 
961f4894 
948d25b6 


6e5c390c 
S2tlect?] 
4923l1cle 
529e7d00 
9f4787c3 
e50elb4f 
54cb266b 
9b5e906c 
7e44008e 
6d83bfcé6 
b21bad3d 
961f4894 


That completes the processing of the first and only message block, M“). The final hash value, 
His calculated to be 


Hy 
H}” 
i 
He 
a 
He 
Ae 
He 





6a09e667 
bb6é7aes5 
3c6ef372 
a54ff53a 
510e527£ 
9b05688c 
1£83d9ab 
5be0cd19 





t §=506e3058 = 
tf §«d39a2165 = 
tf 04d24d6c = 
t b85e2ce9 = 
t 5Sef50f24 = 
+ fb 
t 948d25b6 = 
t 961f4894 = 


121210 = 





The resulting 256-bit message digest is 


ba7816bf£ 
8f0lcfea 
414140de 
5dae2223 
b00361a3 
96177a9c 
b410ff61 








f£20015ad. 


ba7816bf£ 8£01lcfea 414140de 5dae2223 b00361a3 96177a9c b410ff61 £20015ad. 


B.2 


SHA-256 Example (Multi-Block Message) 


Let the message, M, be the 448-bit (/ = 448) ASCTI string 


"abcdbcdecdefdefgefghfghighijhijkijkljkImkImnImnomnopnopq". 


The message is padded by appending a "1" bit, followed by 511 '0" bits, and ending with the 
hex value 00000000 000001c0 (the two 32-bit word representation of the length, 448). 
Thus, the final padded message consists of two blocks (N = 2). 


For SHA-256, the initial hash value, H, is 


) 
Ay 

(0) 
A, 

0) 
A, 


6a09e667 
bb67ae85 
3c6ef372 
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Hy? = a54fF53a 
AY = Sipe5o74 
H{ = 9b05688c 
H{? = 1£83d9ab 
H\® = 5be0cd19. 


The words of the first padded message block, M“”, are then assigned to the words Wo,...,Wis of 
the message schedule: 


Wo = 61626364 Wg = 696a6bEc 
Wi = 62636465 Wo = 6ab6b6c6d 
Wr = 63646566 Wio0 = 6b6c6d6e 
W3 = 64656667 Wi = 6c6d6e6f 
W, = 65666768 Wi2 = 6d6e6f70 
Ws = 66676869 Wi3 = 6e6£7071 
We = 6768696a Wi4 = 80000000 
W, = 68696a6b Wis = 00000000. 


The following schedule shows the hex values for a, b, c, d, e, f, g, and h after pass t of the “for t 
= 0 to 63” loop described in Sec. 6.2.2, step 4. 


a b c d e if g h 


Sdoéaebbl 6a09e667 bbo7ae85 3cb6ef372 fa2a4606 510e527F Y9b05688c 1£f£83d9ab 
2f2d5fcf£ Sdeaebbl 6a09e667 bboé7ae85 4eblcfce fa2a4606 510e527£ 9b05688c 
97651825 2f2d5fcf Sdeaebbl 6a09e667 62d5c49e 4eblcfce fa2a4606 510e527£ 
4a8d64d5 97651825 2f2d5fcf Sdbaebbl 6494841b 62d5c49e 4eblcfce fa2a4606 
£921c212 4a8d64d5 97651825 2f2d5fcf O5c4f88a 6494841b 62d5c49e 4eblcfce 
55c8ef48 £921c212 4a8de4d5 97651825 T7££91C94 O5c4£88a 6494841b 62d5c49e 
485835b7 55c8ef48 $£921c212 4a8d64d5 39a5b2ca T7£F91c94 O5c4F88a 6494841b 
d237e6db 485835b7 55c8ef48 £921c212 a401d211 39a5b2ca T7£F91c94 O5c4f88a 
359f2bce d237e6db 485835b7 55c8ef48 cO09ffec4 a401d211 39a5b2ca 7££91c94 
3a474b2b 359f2bce d237e6db 485835b7 9037b3b8 cO9ffec4 a401d211 39a5b2ca 
=10: b8e2b4cb 3a474b2b 359f2bce d237e6db 443ed29e 9037b3b8 cO09ffec4 a401d211 
=11: 1762215c b8e2b4cbh 3a474b2b 359f2bce eelc97a8 443ed29e 9037b3b8 cO09ffec4 
: 101a4861 1762215c b8e2b4cb 3a474b2b 839a0fC9I eelc97a8 443ed29e 9037b3b8 
=13: do68e6457 101a4861 1762215c b8e2b4cbh 9243f8af 839a0Fc9 eelc97a8B 443ed29e 
=14: ddl6écbb3 d68e6457 101a4861 1762215c 9162aded 9243f8af 839a0fc9 eelc9I7a8 
=15: c3486194 ddlocbhb3 do8e6457 101a4861 1496a54f 9162aded 9243f8af 839a0Fc9 
=16: b9dcacbhbl c3486194 ddlécbhbb3 de68e6457 d4f64250 1496a54f 9162aded 9243f8af 
=17: 046a193e b9dcacbl c3486194 ddlocbb3 885370b6 d4f£64250 1496a54f 9162aded 
=18 : £402f058 046a193e b9dcacbhl c3486194 6f433549 885370b6 d4f64250 1496a54f 
=19: 2139187b £402£058 046a193e b9dcacbl 7c304206 6£433549 885370b6 d4f64250 
=20 : d70acl7d 2139187b £402f058 046a193e Tec6b262 70304206 6£433549 885370b6 
=21: <Ilb2be6b8 d70acl7d 2139187b £402£058 d560b028 Vcc6b262 7c304206 6£433549 
=22: ae2e2d4f l1b2b66b8 d70acl7d 2139187b £074£c95 d560b028 Tec6b262 70304206 
=23: 59fce6b9 ae2e2d4—f lb2be6b8 d70acl7d a2c7d51ld f£074fc95 d560b028 TVcc6b262 
=24: 4a885065 59fce6b9 ae2e2d4f l1b2b66b8 763597fb a2c7d5ld £074fc95 d560b028 


ll 
OMA NDNFWNK CO 


~~ mm SR Re OR RR SE eB eR EB eR Ee OB SS 
— 
N 
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~sme mm SBR Be SMe BRB BBR BeBe BBB BBB HBeOBeHBHBHBeOBRBHBeHBeHBeBeHBeHBeHBHeHBe BBB HSH 


=51: 
= 52>2 
= 53°? 
=54: 
=55: 
= 56: 
=57: 
=58 : 
=59: 
= 60: 
=61: 
=62: 
=63 : 


573221da 
128661da 
73£858af 
7T4bcf£468 
d£7151a0 
eb43f3ed 
5581ab07 
9fc905c8 
9ce5ab2Ft 
1df8e885 
0786dce8 
2c55d3a6 
a985b4be 
9lac9d5d 
7e4d30b8 
72056794 
508al6ab 
b62c7013 
167361de 
de7le2£2 
18£0d19d 
165be9cd 
13d82741 
017b9d99 
543c99al 
758ca97a 
81clcde0 
b8d55619 
ldéde87a 
£907b313 
9e57c4a0 
71629856 
7c015a2c 
921fccbhé6 
e1l8f259a 
bcfce922 
£6f443f8 
86126910 
lbdcéf6ft 


4a885065 
573221da 
128661da 
73£858af 
7T4bc£468 
d£7151a0 
eb43f3ed 
5581ab07 
9fc905c8 
9ce5ab2Ft 
1ldf8e885 
0786dce8 
2c55d3a6 
a985b4be 
9lac9d5d 
7e4d30b8 
72056794 
508al6ab 
b62c7013 
167361de 
de71le2£2 
18£0d19d 
165be9cd 
13d82741 
017b9d99 
543c99al 
758ca97a 
81clcde0 
b8d55619 
ldéde87a 
£907b313 
9e57c4a0 
71629856 
7c015a2c 
921fccbhé6 
el8f259a 
bcfce922 
£6f443f8 
86126910 


59fceb6b9 
4a885065 
573221da 
128661da 
73£858af 
74bc £468 
d£7151a0 
eb43f3ed 
5581ab07 
9fc905c8 
9ce5ab2Ft 
ldf8e885 
0786dce8 
2c55d3a6 
a985b4be 
9lac9d5d 
7e4da30b8 
72056794 
508al6ab 
b62c7013 
167361de 
de7le2£2 
18£0d19d 
165be9cd 
13d82741 
017b9d99 
543c99al 
758ca97a 
81clcde0 
b8d55619 
ldéde87a 
£907b313 
9e57c4a0 
71629856 
7c015a2c 
921fccbhé6 
e1l8f259a 
bcfce922 
£6f443£8 


ae2e2d4f 
59fce6b9 
4a885065 
573221da 
128661da 
73£858aft 
T4ocf£468 
df£7151a0 
eb43f3ed 
5581ab07 
9fc905c8 
9ce5ab2Ft 
1ldf8e885 
0786dce8 
2c55d3a6 
a985b4be 
9lac9d5d 
7e4d30b8 
70056794 
508al6ab 
b62c7013 
167361de 
de71le2£2 
18f£0d19d 
165be9cd 
13d82741 
017b9d99 
543c99al 
758ca97Ta 
81clcdeO 
b8d55619 
ldéde87a 
£907b313 
9e57c4a0 
71629856 
7c015a2c 
921fccbhé 
el8f259a 
befce922 


36e74eb4 
1162d575 
e7T7TcT97T£E 
7T2abaecd 
7629c961 
0635d880 
df£980085 
a94d2afl 
6ef3b6bd 
2a9e048e 
de2a21dl1 
b067claf 
£72bf£353 
68d8d590 
9f5b9b6d 
423b26c0 
45459d97 
80a92a00 
41dd3844 
f£61c636 
6b88472c 
a483f£080 
a7802a4d 
aeb10b60 
16£134b6 
100cf2ea 
5c47eb 7b 
1c806a61 
3443bed4 
61a41711 
eec13548 
2£6c8c4e 
cb9d3dd0 
43d8a034 
51e15869 
962d8621 
acc75916 
2fc08f85 
25d2430a 


763597£fb 
36e74eb4 
1162d575 
e7T7cJ9T£E 
72abaecd 
7629c961 
0635d880 
df£980085 
a94d2afl 
6ef3b6bd 
2a9e048e 
de2a21dl1 
b067claf 
£72bf£353 
68d8d590 
9f5b9b6d 
423b26c0 
45459d97 
80a92a00 
41dd3844 
f£61c636 
6b88472c 
a483f£080 
a7802a4d 
aeb10b60 
16£134b6 
100cf2ea 
5c47eb7b 
1c806a61 
3443bed4 
61a41711 
eec13548 
2£6c8c4e 
cb9d3dd0 
43d8a034 
51e15869 
962d8621 
acc75916 
2fc08f85 


a2c7d5l1ld 
763597£fb 
36e74eb4 
1162d575 
e7T7cl97T£E 
7T2abaecd 
7629c961 
0635d880 
df£980085 
a94d2afl 
6ef3b6bd 
2a9e048e 
de2a21dl1 
b067claf 
£72bf£353 
68d8d590 
9f5b9b6d 
423b26c0 
45459d97 
80a92a00 
41dd3844 
f£61c636 
6b88472c 
a483f£080 
a7802a4d 
aeb10b60 
16£134b6 
100cf2ea 
5c47eb7b 
1c806a61 
3443bed4 
61a41711 
eec13548 
2£6c8c4e 
cb9d3dd0 
43d8a034 
51e15869 
962d8621 
acc75916 


£074£c95 
a2c7d5l1ld 
763597£fb 
36e74eb4 
1162d575 
e7T7TcJ9T£E 
72abaecd 
7629c961 
0635d880 
df£980085 
a94d2afl 
6ef3b6bd 
2a9e048e 
de2a21d1 
b067claf 
£72b£353 
68d8d590 
9f5b9b6d 
423b26c0 
45459d97 
80a92a00 
41dd3844 
f£61c636 
6b88472c 
a483f£080 
a7802a4d 
aeb10b60 
16£134b6 
100cf2ea 
5c4J7eb 7b 
1c806a61 
3443bed4 
61a41711 
eec13548 
2£6c8c4e 
cb9d3dd0 
43d8a034 
51e15869 
962d8621 


That completes the processing of the first message block, M“”. The first intermediate hash value, 
His calculated to be 


6a09e667 
bb6é7aesg5 
3c6ef372 
a54ff53a 
510e527£ 
9b05688c 
1£83d9ab 





lbdc6f6ft 
86126910 
f£6f443f8 
befce922 
25d2430a 
2£c08f85 
acc75916 


85e655d6 
417a1795 
3363376a 
624cde5c 
76609589 
cacofs8l1l 
ec4b32cl 
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Hi” = 5be0cd19 + 962d8621 = f£20e533a. 


The words of the second padded message block, M?, are then assigned to the words Wo,...,W15 
of the message schedule: 


00000000 
00000000 
00000000 
00000000 
00000000 
00000000 
00000000 
00000000 


00000000 
00000000 
00000000 
00000000 
00000000 
00000000 
00000000 


O000001c0. 


The following schedule shows the hex values for a, b, c, d, e, f, g, and h after pass t of the “for t 
= (0) to 63” loop described in Sec. 6.2.2, step 4. 


a 
t= 0: 7c20c838 
t= 1: 7c3c0f86 
t=2: £fdleebdc 
t= 3: £f268faa9 
t= 4: 185a5d79 
t= 5: 3eeb6c06 
t= 6: 89bba3f1 
t= 7: bf9a93a0 
t= 8: 2c096744 
t= 9: 2d964e86 
t =10: 5b35025b 
t=11: 5eb4ec40 
t=12: 35ee996d 
t=13: d74080fa 
t=—14: Ocea5cbhe 
t=15: 16a8cc79 
t=16: £16f634e 
t=17: 23dcb6c2 
t=18 : <dcff40fd 
t=19: 76fla2be 
t =20: 20aad899 
t=21 : d44dc8la 
t=—22: £f13ae55b 
t =23.: a4195b91 
t=24: 4984fa79 
t =25 : aab6cbh982 
t =26: 9450fbbc 
t =27: 0d936bab 
t =28 : d958b529 
t =29: Il1cfa5eb0 
t =30: O2ef3a5f 
t =31 : bOeablc5 


b 


85e655d6 
7¢20c838 
7c3c0f86 
fdleebdc 
£268faa9I 
185a5d79 
3eeb6c06 
89bba3f1 
bf£9a93a0 
2c096744 
20964686 
5b35025b 
5eb4ec40 
35ee996d 
d74080fa 
Ocea5S5cbe 
16a8cc79 
f16f634e 
23dcb6c2 
dcff40fd 
76fla2be 
20aad899 
d44dc8la 
fl3ae55b 
a4195b91 
4984fa79 
aa6cb982 
9450fbbc 
0d936bab 
d958b529 
lcfa5eb0 
O2ef3a5f 


c 


417a1795 
85e655d6 
7020c838 
7c3c0f86 
fdleebdc 
£268faa9 
185a5d79 
3eeb6c06 
89bba3f1 
bf£9a93a0 
2c096744 
20964e86 
5b35025b 
5eb4ec40 
35ee996d 
d74080fa 
Ocea5S5cbe 
16a8cc79 
f£16f634e 
23dcb6c2 
dcff40fd 
76fla2be 
20aad899 
d44dc8la 
fl3ae55b 
a4195b91 
4984fa79 
aa6cb982 
9450fbbc 
0d936bab 
d958b529 
lcfa5eb0 


d 


3363376a 
417a1795 
85e655d6 
7020c838 
7Tc3c0f86 
fdleebdc 
£268faa9 
185a5d79 
3eeb6c06 
89bba3f1 
bf£9a93a0 
2c096744 
20964686 
5b35025b 
5eb4ec40 
35ee996d 
d74080fa 
Ocea5S5cbe 
16a8cc79 
f£16f634e 
23dcb6c2 
dcff40fd 
76fla2be 
20aad899 
d44dc8la 
f1l3ae55b 
a4195b91 
4984fa79 
aa6cb982 
9450fbbc 
0d936bab 
d958b529 
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e 


4670ae6e 
8c51lbe64 
af71b9ea 
e20362ef 
8dfF£3001 
fe20cda6é 
0a34df03 
059abddl1 
abfa465b 
aa27ed82 
10e77723 
e11b4548 
5c24e2a2 
68aa893F 
60356548 
Ofcbh1lf6f 
8b21cdel 
ca9182d3 
69bf7b95 
Odc84bb1 
cc4769Ff2 
5bace62d 
966aa287 
eddbdéed 
a530d939 
Ob5eeea4 
09166dda 
6e495d4b 
c2fa99b1 
6c49db9F 
5dal0665 
£6d93952 


f 


76e€09589 
4670ae6e 
8c51lbe64 
af71b9ea 
e20362ef 
8dfF£3001 
fe20cda6 
0a34df03 
059abddl 
abfa465b 
aa27ed82 
10e77723 
e11b4548 
5c24e2a2 
68aa893F 
60356548 
Ofcb1lf6f 
8b21cdel 
ca9182d3 
69bf7b95 
Odc84bb1 
cc4769Ff2 
5bace62d 
966aa287 
eddbd6éed 
a530d939 
Ob5eeea4 
09166dda 
6e495d4b 
c2fa99b1 
6c49db9Ff 
5dal10665 


g 


cac5f811 
76e€09589 
4670ae6e 
8c51lbe64 
af71b9ea 
e20362ef 
8dff£3001 
fe20cdaé6 
0a34df03 
059abddl1 
abfa465b 
aa27ed82 
10e77723 
e11b4548 
5c24e2a2 
68aa893F 
60356548 
Ofcb1lf6f 
8b21cdel 
ca9182d3 
69bf7b95 
Odc84bb1 
cc4769Ff2 
5bace62d 
966aa287 
eddbdéed 
a530d939 
Ob5eeea4 
09166dda 
6e495d4b 
c2fa99b1 
6c49db9F 


h 


cc4b32cl 
cac5f811 
76e€09589 
4670ae6e 
8c51lbe64 
af71b9ea 
e20362ef 
8df£ff£3001 
fe20cdaé6 
0a34df03 
059abddl1 
abfa465b 
aa27ed82 
10e77723 
e11b4548 
5c24e2a2 
68aa893F 
60356548 
Ofcb1lfof 
8b21cdel 
ca9182d3 
69bf7b95 
Odc84bb1 
cc4769Ff2 
5bace62d 
966aa287 
eddbdéed 
a530d939 
Ob5eeea4 
09166dda 
6e495d4b 
c2fa99b1 


~sm me Sm SS SB BR EB SB BR BB RR BR BR RB RB RR RB RR RB BR RB RB OK OS 


=45: 
=46: 
=47: 
=48: 
=49: 
=50: 
= 51% 
=52)% 
=53: 
=54: 
=:59-3 
=56: 
=57: 
=58 : 
=59: 
= 60: 
=61: 
=62: 
=63 : 


Obfba73c 
4bd1ldf96 
9907f1b6 
ecde4e0d 
2f11¢939 
d949682b 
adca7a96 
221b8a5a 
12da97845 
20794876 
8300fca2 
£2ad6322 
0f154e11 
104a7db4 
0b3303a7 
d7354d5b 
b736d7a6 
2748e5ec 
d8aabcf9 
la6ébcf6a 
4eca6fal 
ec02560a 
d9f0c115 
92952710 
20d4d0e4 
4348ebl1f 
286fe5f0 
1c4cddd9 
a9f181dd 
b25cef29 
908c2123 
9ea7148b 


bO0eablc5 
Obfba73c 
4bdl1ldf96 
9907f1b6 
ecde4e0d 
2£11c939 
d949682b 
adca7a96 
221b8a5a 
12da97845 
20794876 
8300fca2 
£2ad6322 
0£154e11 
104a7db4 
0b3303a7 
d7354d5b 
b736d7a6 
2748e5ec 
d8aabcf9 
la6ébcf6a 
4ecat6fal 
ec02560a 
d9f0c115 
92952710 
20d4d0e4 
4348eb1f 
286fe5f0 
1c4cddd9 
a9f181dd 
b25cef29 
908c2123 


O2ef3a5f 
bOeablc5 
Obfba73c 
4bdl1ldf96 
9907f1b6 
ecde4e0d 
2£11c939 
d949682b 
adca7a96 
221b8a5a 
12d97845 
20794876 
8300fca2 
£2ad6322 
0f154e11 
104a7db4 
0b3303a7 
d7354d5b 
b736d7a6 
2748e5ec 
d8aabcf9 
la6ébcfb6a 
4eca6fal 
ec02560a 
d9f0c115 
92952710 
20d4d0e4 
4348ebl1f 
286fe5f0 
1c4cddd9 
a9f181dd 
b25cef29 


lcfa5eb0 
O2ef3a5f 
b0eablc5 
Obfba73c 
4bd1ldf96 
9907f1b6 
ecde4e0d 
2£11c939 
d949682b 
adca7a96 
221b8a5a 
12d97845 
20794876 
8300fca2 
£2ad6322 
0f154e11 
104a7db4 
0b3303a7 
d7354d5b 
b736d7a6 
2748e5ec 
d8aabcf9 
la6bcf6a 
4eca6fa0 
ec02560a 
d9f0c115 
92952710 
20d4d0e4 
4348eb1f 
286fe5f0 
1lc4cddd9 
a9f181dd 


8b99e3a9 
905e44ac 
66c3043d 
5dc119e6 
fed4celd 
32da99008 
cécce4ff 
Ob82c5eb 
e4213ca2 
££6759ba 
e0e3457c 
cc48c7£3 
6f£9517cb 
5348e8f6 
bbelc39a 
aad55b6b 
68£25260 
d4b58576 
27844711 
££5e99d0 
989ed071 
7151df8e 
624150c4 
226806d6 
4e515a4d 
c2leddf9 
54076664 
£487a853 
27ccb387 
2aalbb13 
9a392956 
2c5c4ed0 


£6d93952 
8b99e3a9 
905e44ac 
66c3043d 
5dc119e6 
fed4celd 
32da99008 
cécce4ff 
Ob82c5eb 
e4213ca2 
££6759ba 
e0e3457c 
cc48c7£3 
6f£9517cb 
5348e8f6 
bbelc39a 
aad55b6b 
68£25260 
d4b58576 
27844711 
££5e99d0 
989ed071 
7151df8e 
624150c4 
226806d6 
4e515a4d 
c2leddf9 
54076664 
£487a853 
27ccb387 
2aalbb13 
9a392956 


That completes the processing of the second and final message block, M” 
H®, is calculated to be 


@) 
A, 


85e655d6 
417a1795 
3363376a 
624cde5c 
76609589 
cacof81l 
ec4b32cl 
£20e533a 








9ea7148b 
908c2123 
b25cef29 
a9f181dd 
2c5c4ed0 
9a392956 
2aalbb13 
27ccb387 





The resulting 256-bit message digest is 


248d6a61 
d20638b8 
e5c02693 
0c3e6039 
a33ce459 
64ff2167 
foecedd4 
19db06cl1. 


5dal10665 
£6d93952 
8b99e3a9 
905e44ac 
66c3043d 
5dc119e6 
fed4celd 
32da99008 
cécce4ff 
Ob82c5eb 
e4213ca2 
f££6759ba 
e0e3457c 
cc48c7£3 
6f£9517cb 
5348e8f6 
bbelc39a 
aad55b6b 
68£25260 
d4b58576 
27844711 
££5e99d0 
989ed071 
7151df8e 
624150c4 
226806d6 
4e515a4d 
c2leddf9 
54076664 
£487a853 
27ccb387 
2aalbb13 


6c49db9F 
5dal10665 
£6d93952 
8b99e3a9 
905e44ac 
66c3043d 
5dc119e6 
fed4celd 
32a99008 
cécce4ff 
Ob82c5eb 
e4213ca2 
££6759ba 
e0e3457c 
cc48c7£3 
6f£9517cb 
5348e8f6 
bbelc39a 
aad55b6b 
68£25260 
d4b58576 
27844711 
££5e99d0 
989ed071 
7151df8e 
624150c4 
226806d6 
4e515a4d 
c2leddf9 
54076664 
£487a853 
27ccb387 


. The final hash value, 


248d6a61 d20638b8 e€5c02693 0c3e6039 a33ce459 64£fF2167 fo6ecedd4 19db06cl1. 
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B.3  SHA-256 Example (Long Message) 


Let the message M be the binary-coded form of the ASCII string which consists of 1,000,000 
repetitions of the character “a”. The resulting SHA-256 message digest is 


cdc76e5c 9914fb92 B8lalc7e2 84d73e67 £1809a48 a497200e 046d39cc c7112cd0. 
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APPENDIX C: SHA-512 EXAMPLES 


This appendix is for informational purposes only and is not required to meet the standard. 


C.1 SHA-512 Example (One-Block Message) 


Let the message, M, be the 24-bit (¢= 24) ASCII string "abc", which is equivalent to the 
following binary string: 


01100001 01100010 01100011. 


The message is padded by appending a 'L" bit, followed by 871 '0" bits, and ending with the 
hex value 
0000000000000000 0000000000000018 


(the two 64-bit word representation of the length, 24). Thus, the final padded message consists 
of one block (N = 1). 


For SHA-512, the initial hash value, H, is 


H\? = 6a09e667f3bcc 908 
H{® = bb67ae8584caa73b 
H® = 3c6ef372fe94F82b 





HS = a54ff£53a5f£1d36f1 
H® = 510e527fade682d1 
H® = 9b05688c2b3e6cl1f 
H® = 1£83d9abfb41bd6b 
H® = 5be0cd19137e2179. 


The words of the padded message block are then assigned to the words Wo,...,Wis of the message 
schedule: 


Wo = 6162638000000000 Ws = 0000000000000000 
W,; = 0000000000000000 Wo = 0000000000000000 
W2 = 0000000000000000 Wio O00D00000000000000 
W3 = 0000000000000000 Wi O00D00000000000000 
Ws, = 0000000000000000 Wi 0000000000000000 
Ws = 0000000000000000 Wi3 O0000000000000000 
We = 0000000000000000 Wi O0000000000000000 
W; = 0000000000000000 Wis 0000000000000018. 


The following schedule shows the hex values for a, b, c, d, e, f, g, and h after pass t of the “for t 
= 0 to 79” loop described in Sec. 6.3.2, step 4. 


t= 0: 
t= 1 
(S82) 
t= 3: 
t= 4: 
i S3°3 
= 6% 
t= 7: 
t= 8: 
t= 29h: 
t =10 
t=11 
t =12 
t =13 
t =14 
t =15 
t =16 
t =17 
t =18 
t =19 


a 
/ 
e 


f6afceb8bcfcddf5 
58cb02347ab51f91 


1320f£8c9Eb872cc0 
c3d4ebfd48650ffa 


ebcff£c07203d91£3 
df£a9b239£2697812 


Sa83cb3e80050e82 
0b47b4bb1928990e 


b680953951604860 
745aca4a342ed2e2 


af573b02403e89cd 
96f60209bb6dc35ba 


c4875b0c7abc076b 
5a6c781f£54dcc00c 


8093d195e0054fa3 
86£67263a0f£0ec0a 


fleca5544cb89225 
d0403c398fc40002 


81782d4a5db48£03 
00091f460be46c52 


69854c4aa0F25b59 
d375471lbdelba3£4 


db0a9963f80c2eaa 
475975b91la7a462c 


5e€41214388186c14 
cdf£3bfF2883f£c9d9 


44249631255d2ca0 
860acf9effbabfol 


fa967eed85a08028 
874bfed5fbaae9f2Ff 


Oae07c86b1181c75 
a77b7c035dd4c161 


caf81a425d800537 
2deecc6b39d64d78 


4725be249ad19e6b 
£47e8353£8047455 


3c4b4104168e3edb 
29695fd88d81dbd0 


9Ya3fb4d38abb6cf06 
£14998dd5£70767e 


b 
/ 
f 


6a09e667E3bcc908 
510e527fadeo82d1 


f6afceb8bcfcddf5 
58cb02347ab51£91 


1320f£8c9Eb872cc0 
c3d4ebfd48650ffa 


ebcff£c07203d91£3 
dfa9b239£2697812 


Sa83cb3e80050e82 
0b47b4bb1928990e 


b680953951604860 
745aca4a342ed2e2 


af573b02403e89cd 
96f60209bb6dc35ba 


c4875b0c7abc076b 
5a6c781f£54dcc00c 


8093d195e0054fa3 
86£67263a0f£0ec0a 


fleca5544cb89225 
d0403c398fc40002 


81782d4a5db48£03 
00091f460be46c52 


69854c4aa0F25b59 
d375471lbdelba3£4 


db0a9963f80c2eaa 
475975b91la7a462c 


5e41214388186c14 
cdf£3bfF£2883f£c9d9 


44249631255d2ca0 
860acf9effbabf6l 


fa967eed85a08028 
874bfed5fbaae9f2F 


Oae07c86b1181c75 
a77b7c035dd4c161 


caf81a425d800537 
2deecc6b39d64d78 


4725be249ad19e6b 
£47¢€8353£8047455 


3c4b4104168e3edb 
29695fd88d81dbd0 
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c 
/ 
& 


bb67ae8584caa73b 
9b05688c2b3e6clf 


6a09e667E3bcc908 
510e527fade682d1 


f6afceb8bcfcddf5 
58cb02347ab51f£91 


1320£8c9Eb872cc0 
c3d4ebfd48650ffa 


ebcf£c07203d91£3 
dfa9b239£2697812 


5a83cb3e80050e82 
0b47b4bb1928990e 


b680953951604860 
745aca4a342ed2e2 


af573b02403e89cd 
96f60209b6dc35ba 


c4875b0c7abc076b 
5a6c781£54dcc00c 


8093d195e0054fa3 
86f67263a0£0ec0a 


fleca5544cb89225 
d0403c398fc40002 


81782d4a5db48£03 
00091f460be46c52 


69854c4aa0F25b59 
d375471lbdelba3£4 


db0a9963f80c2eaa 
475975b91la7a462c 


5e€41214388186c14 
cdf£3bff2883fc9d9 


44249631255d2ca0 
860acf9effbabf6l 


fa967eed85a08028 
874bfe5fbaae9f2F 


Oae07c86b1181c75 
a77b7c035dd4c161 


caf81a425d800537 
2deecc6b39d64d78 


4725be249ad19e6b 
£47e8353£8047455 


d 

/ 

h 
3c6ef372fe94F82b 
1£83d9abfb41bd6b 


bb67ae8584caa73b 
9b05688c2b3e6clf 


6a09e667E3bcc908 
510e527fade6s82d1 


f6afceb8bcfcddf5 
58cb02347ab51f£91 


1320£8c9Eb872cc0 
c3d4ebfd48650ffa 


ebcf£c07203d91£3 
d£a9b239£2697812 


5a83cb3e80050e82 
0b47b4bb1928990e 


b680953951604860 
745aca4a342ed2e2 


af573b02403e89cd 
96£60209b6dc35ba 


c4875b0c7abc076b 
5a6c781£54dcc00c 


8093d195e0054fa3 
86f67263a0f0ec0a 


fleca5544cb89225 
d0403c398fc40002 


81782d4a5db48£03 
00091f460be46c52 


69854c4aa0F25b59 
d375471bdelba3£4 


db0a9963f80c2eaa 
475975b91la7a462c 


5e€41214388186c14 
cdf£3bfFf2883fc9d9 


44249631255d2ca0 
860acf9effbabf6l 


fa967eed85a08028 
874bfed5fbaae9f2f 


Oae07c86b1181c75 
a77b7c035dd4cl161 


caf81a425d800537 
2deecc6b39d64d78 


= 21 2 


=22.: 


=24: 


=27 2 


= 29: 


= 30: 


=31: 


= 32: 


= 33: 


= 34: 


=35: 


= 36: 


=37' 2 


= 38 : 


= 39: 


=41: 


=42: 


8dc5ae65569d3855 
4bb9e66d1145bfdc 


da34d6673d452dcf£ 
8e30££09ad488753 


3e2644567b709a78 
Oac2blida8f£571c6 


4£6877b58£e55484 
c66005£87db55233 


9af£71163£a3a940 
d3ec£13769180e6f 


Obc5£791£8e6816b 
6ddf1lfd7edcce336 


884c3bc27bc4f941 
e6e48c9a8e948365 


eab4a9e5771b8d09 
09068a4e255a0dac 


€62349090f47d30a 
Ofcd£99710£21584 


T4b£40£869094c63 
£0aec2fel437£085 


4c4fbbb75£1873a6 
73e025d91b9efea3 


££4d3f1£0d46a736 
3cd388e119e8162e 


a0509015ca08c8d4 
€1034573654al06£ 


60d4e6995ed91 feb 
efabbd8bf47c04la 


2059eC7743632621 
Ofbae670fa780fd3 


la08lafc59fdbc2c 
£098082f502b44cd 


88df£85b0bbe77514 
8fbf£d0162bbE4675 


002bb8e4cd989567 
66adcfa249acT7bbd 


b3bb8542b3376de5 
b49596c20febaTde 


8e01e125b855d225 
0c710a47bab6a567b 


bO01521lddb6abbel2c 
169008b3a4bb170b 


e96f89dd48cbd851 
£0996439e7b50cb1 


bc05ba8de5d3c480 
639cb938e14dc190 


35d7e7£4l1defcbd5 


9Ya3fb4d38abb6cf06 
£14998dd5f70767e 


8dc5ae65569d3855 
4bb9e66d1145bfdc 


da34d6673d452dcf£ 
8e30Ff£09ad488753 


3e2644567b709a78 
Oac2blida8f571c6 


4£6877b58£e55484 
c66005£87db55233 


9Yaf£71163£a3a940 
d3ec£13769180e6f 


Obc5£791F8e6816b 
6ddflfd7edcce336 


884c3bc27bc4f941 
e6e48c9a8e948365 


eab4a9e5771b8d09 
09068a4e255a0dac 


€62349090f47d30a 
Ofcd£99710£21584 


7T4b£40£869094c63 
£0aec2fel1437£085 


4c4fbbb75£1873a6 
73e025d91b9efea3 


££4d3f1£0d46a736 
3cd388e119e8162e 


a0509015ca08c8d4 
€1034573654al 06£ 


60d4e6995ed91 feb 
efabbd8bf47c04la 


2059eC7743632621 
Ofbae670fa780fd3 


la08lafc59fdbc2c 
£098082f502b44cd 


88df£85b0bbe77514 
8fbf£d0162bbE4675 


002bb8e4cd989567 
66adcfa249ac7bbd 


b3bb8542b3376de5 
b49596c20febaTde 


8e01e125b855d225 
0c710a47bab6a567b 


bO1521lddb6abbel2c 
169008b3a4bb170b 


e96f89dd48cbd851 
£0996439e7b50cb1 


bc05ba8de5d3c480 
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3c4b4104168e3edb 
29695fd88d81dbd0 


9Ya3fb4d38abb6cf06 
£14998dd5£70767e 


8dc5ae65569d3855 
4bb9e66d1145bfdc 


da34d6673d452dcf 
8e30££09ad488753 


3e2644567b709a78 
Oac2bllida8sf571c6 


4£6877b58£e55484 
c66005£87db55233 


9af£71163£a3a940 
d3ec£13769180e6f 


Obc5£791F8e6816b 
6ddf1lfd7edcce336 


884c3bc27bc4f941 
e6e48c9a8e948365 


eab4a9e5771b8d09 
09068a4e255a0dac 


€62349090f47d30a 
Ofcd£99710£21584 


T4b£40£869094c63 
f0aec2fel437£085 


4c4fbbb75£1873a6 
73e€025d91b9efea3 


££4d3f1£0d46a736 
3cd388e119e8162e 


a0509015ca08c8d4 
€1034573654al 06£ 


60d4e6995ed91 feb 
efabbd8bf47c04la 


2059eC7743632621 
Ofbae670fa780fd3 


la08lafc59fdbc2c 
£098082f502b44cd 


88d£85b0bbe77514 
8fb£d0162bbE4675 


002bb8e4cd989567 
66adcfa249ac7bbd 


b3bb8542b3376de5 
b49596c20feba7de 


8e01e125b855d225 
0c710a47bab6a567b 


bO1521ddéabbel2c 
169008b3a4bb170b 


e96f89dd48cbd851 


4725be249ad19e6b 
£47e8353£8047455 


3c4b4104168e3edb 
29695fd88d81dbd0 


9Ya3fb4d38abo6cf06 
£14998dd5£70767e 


8dc5ae65569d3855 
4bb9e66d1145bfdc 


da34d6673d452dcf£ 
8e30££09ad488753 


3e2644567b709a78 
Oac2blida8f571c6 


4£6877b58£e55484 
c66005£87db55233 


9af£71163£a3a940 
d3ec£13769180e6f 


Obc5£791F8e6816b 
6ddf1lfd7edcce336 


884c3bc27bc4f941 
e6e48c9a8e948365 


eab4a9e5771b8d09 
09068a4e255a0dac 


€62349090f47d30a 
Ofcd£99710£21584 


T4b£40£869094c63 
f0aec2fel437£085 


4c4fbbb75£1873a6 
73e025d91b9efea3 


££4d3f1£0d46a736 
3cd388e119e8162e 


a0509015ca08c8d4 
€1034573654al 06£ 


60d4e6995ed91 feb 
efabbd8bf47c041la 


2059eC7743632621 
Ofbae670fa780fd3 


la08lafc59fdbc2c 
£098082f502b44cd 


88d£85b0bbe77514 
8fb£d0162bbE4675 


002bb8e4cd989567 
66adcfa249ac7bbd 


b3bb8542b3376de5 
b49596c20feba7de 


8e01e125b855d225 
0c710a47bab6a567b 


bO1521ddéabbel2c 


cc5100997£E5710£2 


c47c9d5c7ea8a234 
858d832ae0e8911c 


021fbadbabab5ac6 
€95c2a57572d64d9 


£61e672694de2d67 
c6bc35740d8daa9a 


6b69Eclbb482feac 
35264334c03ac8ad 


571£323d96b3a047 
271580ed6c3e5650 


ca9bd862c5050918 
dfe091dab182e645 


813a43dd2c502043 
O7a0d8ef821c5ela 


d43£83727325dd77 
483f80a82eaee23e 


03df11b32d42e203 
504£94e40591cffa 


d63f68037ddf06aa 
a678lefelaalce02 


£650857b5babda4d 
9ccfb3lased£0F86 


63b460e42748817e 
c6b4dd2a9931c509 


7a52912943d52b05 
d2e8 9bbd91e00be0 


4b81c3aec97b6ea4b 
7050598812435lac 


58lecb3355dcd9b8 
6a3c9bO0ET1c8bt36 


2c074484efleac8c 
4797cde4ed370692 


3857dfd2fc37d3ba 
abaf4e9c9f807e51 


cfcd928c5424e2b6 
09aee5bdal644de5 


a8ldedbb9f19e643 
84058865d60a05fa 


ab44e86276478d85 
cd881lee59cabbc53 


5a806d7e9821a501 
aa84b086688a5c45 


eeb9c21bb0102598 
3b5fed0d6alf96el1 


46c4210ab2cc155d 
29fabSa7Tb£t£53366 


639cb938e14dc190 


35d7e7£4ldefcbd5 
cc5100997£E5710£2 


c47c9d5c7ea8a234 
858d832ae0e8911c 


021fbadbabab5ac6 
€95c2a57572d64d9 


£61e672694de2d67 
c6bc35740d8daa9a 


6b69Eclbb482feac 
35264334c03ac8ad 


571£323d96b3a047 
271580ed6c3e5650 


ca9bd862c5050918 
dfe091dab182e645 


813a43dd2c502043 
O7a0d8ef821c5ela 


d43£83727325dd77 
483f80a82eaee23e 


O03df11b32d42e203 
504£94e40591cffa 


d63f68037ddf06aa 
a678lefelaalce02 


£65085 7b5babda4d 
9ccfb3lasod£0F86 


63b460e42748817e 
c6b4dd2a9931c509 


7a52912943d52b05 
d2e8 9bbd91e00be0 


4b81c3aec97b6ea4b 
7050598812435lac 


58lecb3355dcd9b8 
6a3c9b0ET1c8bE36 


2c074484efleac8c 
4797cde4ed370692 


3857dfd2fc37d3ba 
abaf4e9c9f807e51 


cfcd928c5424e2b6 
09aee5bdal644de5 


a8ldedbb9f19e643 
840588 65d60a05fa 


ab44e86276478d85 
cd881lee59cabbc53 


5a806d7e9821a501 
aa84b086688a5c45 


eeb9c21bb0102598 
3b5fed0d6alf96el1 
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£0996439e7b50cb1 


bcO05ba8de5d3c480 
639cb938e14dc190 


35d7e7£4ldefcbd5 
cc5100997£E5710£2 


c47c9d5c7ea8a234 
858d832ae0e8911c 


O21fbadbabab5ac6 
e€95c2a57572d64d9 


£61e672694de2d67 
c6bc35740d8daa9a 


6b69Eclbb482feac 
35264334c03ac8ad 


571£323d96b3a047 
271580ed6c3e5650 


ca9bd862c5050918 
dfe091dab182e645 


813a43dd2c502043 
O7a0d8ef821c5ela 


d43£83727325dd77 
483f80a82eaee23e 


03df£11b32d42e203 
504£94e40591cffa 


d63£68037ddf06aa 
a678lefelaalce02 


£65085 7b5babda4d 
9ccfb3las8ed£0t86 


63b460e42748817e 
c6b4dd2a9931c509 


7a52912943d52b05 
d2e8 9bbd91e00be0 


4b81c3aec976ea4b 
7050598812435lac 


58lecb3355dcd9b8 
6a3c9bO0ET1c8bE36 


2c074484efleac8c 
4797cde4ed370692 


3857dfd2fc37d3ba 
abaf4e9c9f807e51 


cfcd928c5424e2b6 
09aee5bdal644de5 


a8ldedbb9f19e643 
840588 65d60a05fa 


ab44e86276478d85 
cd881lee59cabbc53 


5a806d7e9821a501 
aa84b086688a5c45 


169008b3a4bb170b 


e96f89dd48cbd851 
£0996439e7b5 0cb1 


bcO05ba8de5d3c480 
639cb938e14dc190 


35d7e7£4ldefcbd5 
cc5100997£E5710£2 


c47c9d5c7ea8a234 
858d832ae0e8911c 


021fbadbabab5ac6 
e€95c2a57572d64d9 


£61e672694de2d67 
c6bc35740d8daa9a 


6b69Eclbb482feac 
35264334c03ac8ad 


571£323d96b3a047 
271580ed6c3e5650 


ca9bd862c5050918 
dfe091dab182e645 


813a43dd2c502043 
O7a0d8ef821c5ela 


d43£83727325dd77 
483f80a82eaee23e 


03d£11b32d42e203 
504£94e40591cffa 


d63f68037ddf06aa 
a6781lefelaalce02 


£65085 7b5babda4d 
9ccfb3lased£0t86 


63b460e42748817e 
c6b4dd2a9931c509 


7a52912943d52b05 
d2e8 9bbd91e00be0 


4b81c3aec976ea4b 
7050598812435lac 


58lecb3355dcd9b8 
6a3c9bO0ET1c8bE36 


2c074484efleac8c 
4797cde4ed370692 


3857dfd2fc37d3ba 
abaf4e9c9f807e51 


cfcd928c5424e2b6 
09aee5bdal644de5 


a8ldedbb9f19e643 
840588 65d60a05fa 


ab44e86276478d85 
cd881lee59cabbc53 


= 67 54ba35cf£56a0340e 46c4210ab2cc155d eeb9c21bb0102598 5a806d7e9821a501 
1c66£46d95690bcE£ 29fabSa7b££53366 3b5fed0d6alf96el1 aa84b086688a5c45 
=68: 181839d609c79748 54ba35cf£56a0340e 46c4210ab2cc155d eeb9c21bb0102598 
Oada78ba2d446140 1c66£46d95690bcE£ 29fabSa7b££53366 3b5fed0db6alf96el1 
=69 : fbéaaae5d0b6a447 181839d609c79748 54ba35cf£56a0340e 46c4210ab2cc155d 
e371l1lcb6564d112d Oada78ba2d446140 1c66f46d95690bcE£ 29fabS5a7b££53366 
= 70 7652c579cb60F19c fbéaaae5d0b6a447 181839d609c79748 54ba35cf£56a0340e 
affo2c9ee5ff80fa e371l1lcb6564d112d Oada78ba2d446140 1c66f46d95690bcE£ 
= 71.2 £15e9664b2803575 7652c579cb60F19c fbéaaae5d0b6a447 181839d609c79748 
947 c3dfafee570ef affo2c9ee5ff80fa e371llcb6564d112d Oada78ba2d446140 
=72: 358406d165aee9ab £15e9664b2803575 7652c579cb60£19c fbéaaae5d0b6a447 
8c7Tb5£d91a794caN 947 c3dfafee570ef affo2c9ee5ff80fa e371llcb6564d112d 
= 73 20878dcd29cdfaf5 358406d165aee9ab £15e9664b2803575 7652c579cb60£19c 
054d3536539948d0 8c7Tb5£d91a794caN 947 c3dfafee570ef affo2c9ee5ff80fa 
=74: 33d48dabb5521de2 20878dcd29cdfaf5 358406d165aee9ab £15e9664b2803575 
2bal8245b50de4cf 054d3536539948d0 8c7Tb5£d91a794caN 947 c3dfafee570ef 
= 75 c8960e6be8 646916 33d48dabb5521de2 20878dcd29cdfaf5 358406d165aee9ab 
995019a6ff3ba3de 2bal8245b50de4c£ 054d3536539948d0 8c7b5£d91a794caN 
= 76 654ef9abec389caI c8960e6be8 646916 33d48dabb5521de2 20878dcd29cdfaf5 
ceb9fc3691ce8326 995019a6ff3ba3de 2bal8245b50de4c£ 054d3536539948d0 
=77 "3 d67806db8b148677 654ef 9abec389caY9 c8960e6be8 646916 33d48dabb5521de2 
25c96a7768 fb2aa3 ceb9fc3691ce8326 995019a6ff3ba3de 2bal8245b50de4c£ 
= 78 10d9c4c4295599f6 d67806db8b148677 654ef 9abec389ca9 c8960e6be8 646916 
9bb4d39778c07£9e 25c96a77 68 fb2aa3 ceb9fc3691ce8326 995019a6ff3ba3de 
=79 73a54£399Fa4b1b2 10d9c4c4295599f6 d67806db8b148677 654ef 9abec389ca9 
d08446aa79693ed7 9bb4d39778c07£9e 25c96a7768fb2aa3 ceb9fc3691ce8326 


That completes the processing of the first and only message block, M“’’. The final hash value, 


His calculated to be 








H\> = 6a09e667£3bcc908 73a54£399fa4b1b2 ddaf35a193617aba 
HH!” = bb67ae8584caa73b 10d9c4c4295599£6 cc417349ae204131 
HS? = 3c6ef372fe94f£82b d67806db8b148677 12e6fa4e89a97ea2 
Hs? = ad4ff£53a5f£1d36f1 654ef9abec389ca9 a9eeee64b55d39a 
H\ = 510e527f£ade682d1 d08446aa79693ed7 2192992a274fclas 
H® = 9)05688c2b3e6cl£ 9bb4d39778c07£9e 36ba3c23a3feebbd 
H{ = 1£83d9abfb41bd6b 25¢96a7768fb2aa3 454a4423643ce80e 
Hi” = 5be0cd19137e2179 ceb9fc3691ce8326 2a9ac94fa54ca4 oF. 


The resulting 512-bit message digest is 


ddaf35a19361l7aba cc417349ae204131 12e6fa4e89a9T7Tea2 Oadeeee64b55d39a 
2192992a274fcla8 36ba3c23a3feebbd 454d4423643ce80e 2a9ac94fa54ca4 Of. 
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C.2 SHA-512 Example (Multi-Block Message) 
Let the message, M, be the 896-bit (= 896) ASCII string 


"abcdefghbcdefghicdefghijdefghijkefghijklfghijkimghijklmn 
hijklmnoijklmnopjkimnopqkImnopqrImnopqrsmnopqrstnopgqrstu". 


The message is padded by appending a "1" bit, followed by 1023 '0" bits, and ending with the 
hex value 
OO0O00000000000000 0000000000000380 


(the two 64-bit word representation of the length, 896). Thus, the final padded message consists 
of two blocks (N = 2). 


For SHA-512, the initial hash value, H, is 


H\® = 6a09e667£3bcc908 
H{® = bb67ae8584caa73b 
H® = 3c6ef372fe94f82b 
HY = a5dttosa5tidserl 
H{ = 510e527fade682d1 
H® = 9b05688c2b3e6cl1f 
H{? = 1£83d9abfb41bd6b 
H® = 5be0cd19137e2179. 





The words of the padded message block are then assigned to the words Wo,...,Wis of the message 
schedule: 


Wo = 6162636465666768 Ws = 696a6bb6cb6db6e6f70 
Wi = 6263646566676869 Wo = 6abbb6c6d6e6f7071 
Wr = 636465666768696a Wio0 = 6b6c6d6e6£707172 
W3 = 6465666768696a6b Wu = 6c6d6e6£70717273 
Ws, = 65666768696a6b6c Wi2 = 6d6e6£7071727374 
Ws = 666768696a6b6c6d Wp = 6e€6£707172737475 
We = 6768696a6b6c6dEe Wi4 = 8000000000000000 
W, = 68696ab6b6cb6db6e6f Wis = 0000000000000000. 


The following schedule shows the hex values for a, b, c, d, e, f, g, and h after pass t of the “for t 
= (0) to 79” loop described in Sec. 6.3.2, step 4. 
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She: 


= 12): 


=14: 


=17: 


=19: 


= 71.2 


10 : 


a 
/ 
e 


foatce9d2263455d 
58cb0218e01b86£9 


0b7056a534ae5f62 
£8c7198Ffe39e4c8c 


20a82233760cC9942 
303eccccd65953de 


a023f17ce52cda7b 
ffdee5eedcc9ca42 


8£0a67d9d591ala7 
cbh4cfbb166505£2£ 


b466267371acc493 
73d6c84c54d399ee 


658269f1a312£ccd 
cdc40314975£fb275 


65e3519c5b88181b 
a657850ab3970c5a 


56604fbb4b6393ec 
e8b3be22fbeb64df7 


c4562769a37d02c0 
0062e70alef705cl 


27c0b4c9186e1736 
bc9740477al8ae2d 


£17£52£fb02f4eb74 
be58522cb9590eel1 


£2c245ac903d4a35 
49d5fa3al6dcd502 


9b04175ea8090daa 
ec9c5e98££98760d 


481b8abee5e07031 
e4d35b613a5ac420 


9356ac3ec3e51459 
701£17d27582443b 


b889ed34abd7aa37 
1d05d9ba779ala78 


b£537b1£3edc7381 
c362£f£9c£9I32951d 


d4e44d54e8242ad8 
459e4e6888919f36 


O5£3fba454e5de3d 
caed4b5fa322b984 


cdb73772dc0248bf 
dc8049afabacd502 


1d47a3268ff677ed 


b 
/ 


f 


6a09e667E3bcc908 
510e527fade682d1 


foafce9d2263455d 
58cb0218e01b86f9 


0b7056a534ae5f62 
£8c7198fe39e4c8c 


20a82233760cC9942 
303eccccd65953de 


a023f17ce52cda7b 
ffdee5eedcc9ca42 


8£0a67d9d591ala7 
cbh4cfbb166505£2F 


b466267371acc493 
73d6c84c54d399ee 


658269f1a312£ccd 
cdc40314975f£b275 


65e3519c5b88181b 
a657850ab3970c5a 


56604fbb4b6393ec 
e8b3be22fbeb64df7 


c4562769a37d02c0 
0062e70alef£705cl 


27c0b4c9186e1736 
bc9740477al8ae2d 


£17£52£fb02f4eb74 
be58522cb9590eel1 


£2c245ac903d4a35 
49d5fa3al6dcd502 


9b04175ea8090daa 
ec9c5e98££98760d 


481b8ab6ee5e07031 
e4d35b613a5ac420 


9356ac3ec3e51459 
701£17d27582443b 


b889ed34abd7aa37 
1d05d9ba779ala78 


b£537b1£3edc7381 
c362£f9cE932951d 


d4e44d54e8242ad8 
459e4e6888919f36 


O5£f3fba454e5de3d 
caed4b5f£a322b984 


cdb73772dc0248bft 


47 


c 
/ 
& 


bb67ae8584caa73b 
9b05688c2b3e6clf 


6a09e667£3bcc908 
510e527fade6s82d1 


foafce9d2263455d 
58cb0218e01b86f9 


0b7056a534ae5f62 
£8c7198fe39e4c8c 


20a82233760c9942 
303eccccd65953de 


a023f17ce52cda7b 
ffidee5eedcc9ca42 


8£0a67d9d591ala7 
cbh4cfbb166505£2E 


b466267371lacc493 
73d6c84c54d399ee 


658269f1a312fccd 
cdc40314975£b275 


65e3519c5b88181b 
a657850ab3970c5a 


56604fbb4b6393ec 
e8b3be22fbeb64df7 


c4562769a37d02c0 
0062e70alef705cl1 


27c0b4c9186e1736 
bc9740477al8ae2d 


£17£E52£b02£4eb74 
be58522cb9590ee1 


£2c245ac903d4a35 
49d5fa3al6dcd502 


9b04175ea8090daa 
ec9c5e98££98760d 


481b8abee5e07031 
e4d35b613a5ac420 


9356ac3ec3e51459 
701£17d27582443b 


b889ed34abd7aa37 
1d05d9ba779ala78 


b£537b1£3edc7381 
c362£f£9c£9I32951d 


d4e44d54e8242ad8 
459e4e6888919f36 


O5f3fba454e5de3d 


d 

/ 

h 
3c6ef372fe94F82b 
1£83d9abfb41bd6b 


bb67ae8584caa73b 
9b05688c2b3e6clf 


6a09e667E3bcc908 
510e527fade682d1 


foafce9d2263455d 
58cb0218e01b86f9 


0b7056a534ae5f62 
£8c7198fe39e4c8c 


20a82233760c9942 
303eccccd65953de 


a023f17ce52cda7b 
ffdee5eedcc9ca42 


8£0a67d9d591ala7 
cbh4cfbb166505£2£ 


b466267371lacc493 
73d6c84c54d399ee 


658269f1a312£ccd 
cdc40314975£b275 


65e3519c5b88181b 
a657850ab3970c5a 


56604fbb4b6393ec 
e8b3be22fbe64df7 


c4562769a37d02c0 
0062e70alef705cl 


27c0b4c9186e1736 
bc9740477al8ae2d 


£17£E52£fb02£4eb74 
be58522cb9590ee1 


£2c245ac903d4a35 
49d5fa3al6dcd502 


9b04175ea8090daa 
ec9c5e98££98760d 


481b8abee5e07031 
e4d35b613a5ac420 


9356ac3ec3e51459 
701£17d27582443b 


b889ed34abd7aa37 
1d05d9ba779ala78 


b£537b1 £3edc7381 
c362££9c£9I32951d 


d4e44d54e8242ad8 


=22'*: 


=24 : 


=27 2 


= 29: 


= 30: 


=31: 


= 32:2 


= 33: 


= 34: 


=35: 


= 36: 


= 37° 


= 38 : 


= 39: 


=41: 


=42: 


8407818e9b28cc12 


af4e23ebo22d0df4 
64b5ae5 424598428 


be50606778del4a6 
Oa5d727cc92eT7adb 


821e44£6678ac478 
£367e596d0a038a5 


0c852b1359a77c18 
6dec8a3396a80c3Ff 


ebb574fad4b7a7e4 
a24le7efcleb6ff9 


a092821c3cdf08da 
c84e849917a7c08e 


82ba2ela2df2a4fl 
61845£6924789851 


1959ad991c63d06a 
231faf24910a891a 


9b32d4cacd9a625b 
533066919d608799 


dc55339£4d841965 
e2517£359998a58d 


fdebb1283b12514f 
b1989170a183c661 


b44c7975a83e3334 
009ad175b8d588a4 


Obac6lbfc53d18b7 
a7d5416d690557b8 


392893c22e75856a 
Ta7c9eb7bc813248 


824408631432e09b 
5e696a9fda5b6d6bt 


a64162f151la8clcb 
0£57062401dc680b 


92253 7abadle95al 
4£4c193d435f£721 


b80591f6fbfadcde 
O0£4407c0£37237e 


O8f151f£4b8d0fa2e 
ec8b96fe402094cd 


12b5fcc2be68Ft65c0 
de68810ldfd24a148 


a71lb£5bd64289948 
e052bf£b7a6945939 


890c2cd670c4aea3 
dd1l3e4edeeff£00e7 


ca61990b43297£fc 


dc8049afabacd502 


1d47a3268ff677ed 
8407818e9b28cc12 


af4e23ebo22d0df4 
64b5ae5 424598428 


be50606778del4a6 
Oa5d727cc92e7adb 


821e44£6678ac478 
£367e596d0a038a5 


0c852b1359a77c18 
6dec8a3396a80c3F 


ebb574fad4b7a7e4 
a24le7efcleb6ff9 


a092821c3cdf08da 
c84e849917a7c08e 


82ba2ela2df2a4fl 
61845£6924789851 


1959ad991c63d06a 
231faf24910a891la 


9b32d4cacd9a625b 
533066919d608799 


dc55339£4d841965 
e2517£359998a58d 


fdebb1283b12514f 
b1989170a183c661 


b44c7975a83e3334 
009ad175b8d588a4 


Obac6lbfc53d18b7 
a7d5416d690557b8 


392893c22e75856a 
Ta7c9eb7bc813248 


824408631432e09b 
5e696a9fdad5odebt 


a64162f151la8clcb 
0£57062401dc680b 


92253 7abadle95al 
4£4c193d435f£721 


b80591f6fbfadcde 
O0£4407c0£37237e 


O8f151f4b8d0fa2e 
ec8b96fe402094cd 


12b5fcc2be68Ft65c0 
de8810ldfd24a148 


a71lb£5bd64289948 
e052bf£b7a6945939 


890c2cd670c4aea3 
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caed4b5fa322b984 


cdb73772dc0248bf 
dc8049afabacd502 


1d47a3268ff677ed 
8407818e9b28cc12 


af4e23ebo22d0df4 
64b5ae5 424598428 


be50606778del4a6 
Oa5d727cc92e7adb 


821e44£6678ac478 
£367e596d0a038a5 


0c852b1359a77c18 
6dec8a3396a80c3F 


ebb574fad4b7a7e4 
a24le7efcleb6ff9 


a092821c3cdf08da 
c84e849917a7c08e 


82ba2ela2df2a4fl 
61845£6924789851 


1959ad991c63d06a 
231faf24910a891la 


9b32d4cacd9a625b 
533066919d608799 


dc55339f4d841965 
e2517£359998a58d 


fdebb1283b12514f 
b1989170a183c661 


b44c7975a83e3334 
009ad175b8d588a4 


Obac6lbfc53d18b7 
a7d5416d690557b8 


392893c22e75856a 
TaTc9eb7bc813248 


824408631432e09b 
5e696a9fda5b6d6bft 


a64162f151la8clcb 
0£57062401dc680b 


922537abadle95al 
4f£4c193d435f£721 


b80591f6fbfadcde 
O00f4407c0£37237e 


O8f151f£4b8d0fa2e 
ec8b96fe402094cd 


12b5fcc2be68Ff65c0 
de68810ldfd24a148 


a71lb£5bd64289948 


459e4e6888919f36 


O5f3fba454e5de3d 
caed4b5fa322b984 


cdb73772dc0248bf 
dc8049afabacd502 


1d47a3268ff677ed 
8407818e9b28cc12 


af4e23ebo22d0df4 
64b5ae5 424598428 


be50606778del4a6 
Oa5d727cc92e7adb 


821e44£6678ac478 
£367e596d0a038a5 


0c852b1359a77c18 
6dec8a3396a80c3Ff 


ebb574fad4b7a7e4 
a24le7efcleb6ff9 


a092821c3cdf08da 
c84e849917a7c08e 


82ba2ela2df2a4fl 
61845£6924789851 


1959ad991c63d06a 
231faf24910a89l1la 


9b32d4cacd9a625b 
533066919d608799 


dc55339f4d841965 
e2517£359998a58d 


fdebb1283b12514f 
b1989170a183c661 


b44c7975a83e3334 
009ad175b8d588a4 


Obac6lbf£c53d18b7 
a7d5416d690557b8 


392893c22e75856a 
TaTc9eb7bc813248 


824408631432e09b 
5e696a9fda5b6d6bt 


a64162£f151la8clcb 
0£57062401dc680b 


922537abadle95al 
4£4c193d435f£721 


b80591f6fbfadcde 
00£4407c0£37237e 


O8f151f£4b8d0fa2e 
ec8b96fe402094cd 


12b5fcc2be6s8t65c0 


139aa55c51d9ee5f 


7196e8fa538ba4bFt 
046735513cdd14d3 


1£0720944dbeb6a4 
a4leb7e5a27588e3 


ded4£8608b8ab199 
24b9c216£915da60 


88761eb67845978e 
9fe22e39448d50ed 


7d40e6be47d85702 
d9c900e01968c33e 


700d0988d£5768598 
2Zec2e522aTcldl2c 


48a8b60575b37£31 
7059£9bc8c88a373 


6bc425af294bbE79 
6a8143b1716ee33d 


307a456158ee8849 
4372e85cl6ee4440 


af36382c8fd7/1lb6be 
a8£8b0033187a916 


810ebee951c64cal 
16a64£5997b9ccab 


2dd7659f1b4d13cd 
5da6793bb7286a4b 


5ac71l2acff4b98be 
91f6395b30ladbfd 


claf358833cb03c0 
d4883c0c21ddal190 


88a306074d388c7d 
9Fc52468b897£9C8 


fllbfd0cf67d3040 
47efb6407£74d318 


1£065e7828ed4elb 
7481899904a4ce23 


aebde39f2bc42ecl 
62ab526ff177a988 


d35a94706e3e5d£2 
53£92b648d5d815c 


d72d727c53e09ab9 
10746426ba9824f4 


3a7235e5a4051d94 
afe455daec5c2b00 


£7£510fe73ef7e76 
£1202c0bb7c4583£ 


23c2acfb393523e9 
a0bc2a61044acl2e 


dd1l3e4edeeff00e7 


ca61990b43297ffc 
139aa55c51d9ee5f 


7196e8fa538ba4bFt 
046735513cdd14d3 


1£0720944dbeb6a4 
a4leb7e5a27588e3 


ded4£8608b8ab199 
24b9c216£915da60 


88761leb67845978e 
9fe22e39448d50ed 


7d40e6be47d85702 
d9c900e01968c33e 


700d0988d£5768598 
2Zec2e522aT7cldl2c 


48a8b60575b37£31 
7059£9bc8c88a373 


6bc425at294bbE79 
6a8143b1716ee33d 


307a456158ee8849 
4372e85cl6ee4440 


af36382c8fd7/1l6be 
a8£8b0033187a916 


810ebee951c64cal 
16a64£5997b9ccab 


2dd7659f1b4d13cd 
5da6793bb7286a4b 


5ac71l2acff4b98be 
91f6395b30ladbfd 


claf358833cb03c0 
d4883c0c21ddal190 


88a306074d388c7d 
9FCc52468b897£9C8 


fllbfdd0cft67d3040 
47efb6407£74d318 


1£065e7828ed4elb 
7481899904a4ce23 


aebde39f2bc42ecl 
62ab526ff177a988 


d35a94706e3e5d£2 
53£92b648d5d815c 


d72d727c53e09ab9 
10746426ba9824f4 


3a7235e5a4051d94 
afe455daec5c2b00 


£7£510fe73ef7e76 
£1202c0bb7c4583£ 


49 


e052bfb7a6945939 


890c2cd670c4aea3 
ddi3e4edeeff00e7 


ca61990b43297ffc 
139aa55c51d9ee5f 


7196e8fa538ba4bFt 
046735513cdd14d3 


1£0720944dbeb6a4 
a4leb7e5a27588e3 


ded4£8608b8ab199 
24b9c216£915da60 


88761leb67845978e 
9fe22e39448d50ed 


7d40e6be47d85702 
d9c900e01968c33e 


700098 8df£5768598 
2Zec2e522aTcldl2c 


48a8b60575b37£31 
7059£9bc8c88a373 


6bc425at294bbE79 
6a8143b1716ee33d 


307a456158ee8849 
4372e85cl1l6ee4440 


af36382c8fd7/1lb6be 
a8£8b0033187a916 


810ebee951cb64cal 
16a64f£5997b9ccab 


2dd7659f1b4d13cd 
5da6793bb7286a4b 


5Sac7l2acff4b98be 
91f6395b30ladbfd 


clat358833cb03c0 
d4883c0c21ddal190 


88a306074d388c7d 
9Fc52468b897£9C8 


fllbfd0cf67d3040 
47efb6407£74d318 


1£065e7828ed4elb 
7481899904a4ce23 


aebde39f2bc42ecl 
62ab526ff177a988 


d35a94706e3e5d£2 
53£92b648d5d815c 


d72d727c53e09ab9 
10746426ba9824f4 


3a7235e5a4051d94 
afe455daec5c2b00 


d68810ldfd24a148 


a71lb£5bd64289948 
e052bfb7a6945939 


890c2cd670c4aea3 
dd1i3e4edeeff00e7 


ca61990b43297ffc 
139aa55c51d9ee5f 


7196e8fa538ba4bFt 
046735513cdd14d3 


1£0720944dbeb6a4 
a4leb7e5a27588e3 


ded4£8608b8ab199 
24b9c216£915da60 


88761eb67845978e 
9fe22e39448d50ed 


7d40e6be47d85702 
d9c900e01968c33e 


700098 8d£5768598 
2Zec2e522aT7Tcldl2c 


48a8b60575b37£31 
7059£9bc8c88a373 


6bc425at294bbE79 
6a8143b1716ee33d 


307a456158ee8849 
4372e85cl1l6ee4440 


af36382c8fd7/1l6be 
a8£8b0033187a916 


810ebee951c64cal 
16a64f£5997b9ccab 


2dd7659f1b4d13cd 
5da6793bb7286a4b 


5Sac71l2acff4b98be 
91f6395b30ladbfd 


clat358833cb03c0 
d4883c0c21ddal190 


88a306074d388c7d 
9Fc52468b897£9C8 


fllbfd0cf67d3040 
47efb6407£74d318 


1£065e7828ed4elb 
7481899904a4ce23 


aebde39f2bc42ecl 
62ab526ff177a988 


d35a94706e3e5d£2 
53£92b648d5d815c 


d72d727c53e09ab9 
10746426ba9824f4 


=68 : 0307d241laled7121 23c2acfb393523e9 £7£510fe73ef7e76 3a7235e5a4051d94 
fad5f38fle0aeal2 a0bc2a61044acl2e £1202c0bb7c4583f afe455daec5c2b00 
=69: 191814d82f0al6fb 0307d241laled7121 23c2acfb393523e9 £7£510fe73ef7e76 
39d325086e66e200 fad5f38fleQaeal2 a0bc2a61044acl2e £1202c0bb7c4583f 
= 70 Oaled41lb6dal8c01 191814d82f0al6fb 0307d241laled7121 23c2acfb393523e9 
b3d3521e166e5df1 39d325086e66e200 fad5f38fleQaeal2 a0bc2a61044acl2e 
=71: 8a3f07db93f6Cc827 Oaled41lb6dal8c01 191814d82f0al6fb 0307d241laled7121 
66370074be040ed7 b3d3521el166e5dfl 39d325086e66e200 fad5f38fleQaeal2 
=72: 002744d87ef80d28 8a3f07db93f6Cc827 Oaled41b6dal8c01 191814d82f0al6fb 
8c5a245de2d72fe6 66370074be040ed7 b3d3521e166e5df1 39d325086e66e200 
=73 778dc7880a4a2aa0 002744d87ef80d28 8a3f07db93f6Cc827 Oaled41b6dal8c01 
45a375b466e5e342 8c5a245de2d72fe6 66370074be040ed7 b3d3521e166e5df1 
=74: a3fllde5ede05b11 778dc7880a4a2aa0 002744d87ef80d28 8a3f£07db93f6Cc827 
f5bbf52flab7cc05 45a375b466e5e342 8c5a245de2d72fe6 66370074be040ed7 
=75 629c8aebecd8af4b a3fllde5ede05b11 778dc7880a4a2aa0 002744d87ef80d28 
5a8fe5919d3cf136 f5bbf52flab7cc05 45a375b466e5e342 8c5a245de2d72fe6 
=76 c9a8cle2d063ce94 629c8aebecd8af4b a3fllde5ede05b11 778dc7880a4a2aa0 
aacd089bfae8faf9 5a8fe5919d3cf136 f5bbf52flab7cc05 45a375b466e5e342 
=77: c517cbha6a09bb26a c9a8cle2d063ce94 629c8aebecd8af4b a3fllde5ede05b11 
e€1682bd33c8f8e23 aacd089bfae8faf9 5a8fe5919d3cf136 f5bbf52flab7cc05 
= 78 11e3570e06e3b74e c517cbha6a09bb26a c9a8cle2d063ce94 629c8aebecd8af4b 
O75aabbade34fd0l e1682bd33c8f8e23 aacd089bfae8faf9 5a8fe5919d3cf136 
= 79 d90f1b1237b3a561 11e3570e06e3b74e c517cha6a09bb26a c9a8cl1le2d063ce94 
867983f69d3a3ad1 O75aabbade34fd0l e1682bd33c8f8e23 aacd089bfae8faf9 


That completes the processing of the first message block, M“”’. The intermediate hash value, H“”, 
is calculated to be 





H\” = 6a09e667£3bcc908 d90£1b1237b3a561 4319017a2b706e69 
H\” = bb67ae8584caa73b 11¢3570e06e3b74e cd4b05938bae5e89 
HS = 3c6ef372f£e94£82b c517cba6a09bb26a 0186bf199F30aa95 
H = a54££53a5f£1d36f1 c9a8cle2d063ce94 6ef8b71d2£810585 
H\? = 510e527f£ade682d1 867983f69d3a3ad1 d787d6764b20bda2 
Hi = 9b05688c2b3e6clf£ 075aabbade34fd01 a260144709736920 
H{® = 1£83d9abfb41bd6b e1682bd33c8f8e23 00ec057£37d14b8e 
H® = 5be0cd19137e2179 aacd089bfae8faf9 06add5b50e671c72. 


The words of the second padded message block, M?, are then assigned to the words Wo,...,W15 


of the message schedule: 


50 


= 0000000000000000 


0000000000000000 
0000000000000000 


0000000000000000 
= 0000000000000000 


0000000000000000 
0000000000000000 


= 0000000000000000 


Ws = 0000000000000000 
Wo = 0000000000000000 
Wio = 0000000000000000 
Wi = 0000000000000000 
Wi2 = 0000000000000000 
Wi3 = 0000000000000000 
Wi4 = 0000000000000000 
Wis = 0000000000000380. 


The following schedule shows the hex values for a, b, c, d, e, f, g, and h after pass t of the “for t 
= 0 to 79” loop described in Sec. 6.1.2, step 4. 


t= 0: 
eS 4 
fSe23 
f= 737% 
t= 4: 
f="9°2 
=76.2 
Sts 
t= 8: 
t= 9: 
t =10 
a Me 
t =12 
t= 
t=14 
6215 


13: 


a 

i, 

ée 
b8£db92bdfb187e8s 
1d5f£4d5ad031b8e6 


6eb90718369c5cd7 
4b69b4877d987b0fe 


c83451£2335d5144 
d6b67350e0781e99 


28ecldeb2a9ee6e3 
25e3136be5999b8C 


806abd86c0479e5b 
1b8£7670eab1lcf89 


234788f£8a54aed38 
4fabe51c67d5d156 


01264f18257b5e2c 
1¢3506096b99de50 
5b14£38104dde991 
13f8bfdc4001c362 
£522574a41lb2aac6 
63a5f£09617622ed2 


6ec258b855afaed5a 
211e271d92770b36 


9364214ba48b416c 
d64dcbhb6ec0fed5bac 


082ba62147ecbbd5 
34£e78473b61266e 


5790f£6ba82bba809 
d491e309141dcaa3 


aéb8aefd086d33ce 
044943c2992cc0f0 


bE2324a9a363abe7 
Ocf5f4bde5977c54 


O00e8e32076ablaft 


b 
/ 


f 


4319017a2b706e69 
d787d6764b20bda2 


b8£db92bdfb187e8s 
1d5£4d5ad031b8e6 


6eb90718369c5cd7 
469b4877d987b0fe 


c83451£2335d5144 
d6b67350e0781e99 


28ecldeb2a9ee6e3 
25e3136be5999b8C 


806abd86c0479e5b 
1b8£7670eablcf89 


234788f8a54aed38 
4fabe51c67d5d156 


01264f18257b5e2c 
1c3506096b99de50 


5b14£38104dde991 
13£8bfdc4001c362 


£522574a41b2aac6 
63a5f09617622ed2 


6ec258b855afaed5a 
211e€271d92770b36 


9364214ba48b416c 
d64dcbhb6ec0fed5bac 


082ba62147ecbbd5 
34£e78473b61266e 


5790f£6ba82bba809 
d491e309141dcaa3 


aoéb8aefd086d33ce 
044943c2992cc0f0 


b£2324a9a363abe7 


51 


c 
/ 
& 


cd4b05938bae5e89 
a260144709736920 


431901 7a2b706e69 
d787d6764b20bda2 


b8£db92bdfb187e8 
1d5£4d5ad031b8e6 


6eb90718369c5cd7 
4b9b4877d987b0fe 


c83451£2335d5144 
d6b67350e0781e99 


28ecldeb2a9ee6e3 
25e3136be5999b8C 


806abd86c0479e5b 
1b8£7670eab1lcf89 
234788f8a54aed38 
4fabe51c67d5d156 
01264f18257b5e2c 
1c3506096b99de50 


5b14£38104dde991 
13£8bfdc4001c362 


£522574a41lb2aac6 
63a5f£09617622ed2 


6ec258b855afaeda 
211e271d92770b36 


9364214ba48b416c 
d64dcb6ec0fed5bac 


082ba62147ecbbd5 
34£e78473b61266e 


5790 f6ba82bba809 
d491e309141dcaa3 


aéb8aefd086d33ce 


d 
/ 
h 


0186b£199£30aa95 
00ec057£37d14b8e 


cd4b05938bae5e89 
a260144709736920 


431901 7a2b706e69 
d787d6764b20bda2 


b8£db92bdfb187e8 
1d5f£4d5ad031b8e6 


6eb90718369c5cd7 
4b9b4877d987b0fe 


c83451£2335d5144 
d6b67350e0781e99 


28ecldeb2a9eeb6e3 
25e3136be5999b8cC 
806abd86c0479e5b 
1b8£7670eablcf89 
234788f8a54aed38 
4fabe51c67d5d156 


01264f18257b5e2c 
1c3506096b99de50 


5b14£38104dde991 
13f£8bfdc4001c362 


£522574a41lb2aac6 
63a5f09617622ed2 


6ec258b855afaeda 
211e271d92770b36 


9364214ba48b416c 
dé64dcb6ec0fed5bac 


082ba62147ecbbd5 
34£e78473b61266e 


5790£6ba82bba809 


= 7 


=19: 


=21 2 


=22. 


= 24: 


=27: 


= 29: 


= 30: 


=31: 


=322 


= 33: 


= 34: 


=35: 


= 36: 


=3F 3 


43bf£4eb269a2650c 


£O376dtfoefff4a7 
69fa5896969e85b8 


2f£ad194272cda857 
ddb519d663b7b6ec 


9ae56936eC95325ac 
04ceb04676619057 


d94ccb853£53433b 
dcdc0£45813fb5a2 


837£8075d2945995 
27265£79a91419d8 


78 6bde689f7aab2d 
566586e69ad3£487 


276457£01812aa6f 
e78fb8b0dfbbcb2f 


Ode519£f5d6c2c298 
5ca3e5cd1a30b954 


54314d££825e2b22 
b8la5le0c96ccf77 


5d3£98dd7b29c363 
95d49494f5a0d14a 


5e9da426aa7d4a58 
d22cccad2e391cd4 


3b62dd973298ea43 
aceb5d06101e514e 


£d258ff809b2253d 
26c991e85352da6ft 


b462a20846af417d 
291eee54c034c326 


d5471e3dc7171224 
Oaaf99c59e7fadbd 


9ace856bal290e6e 
658f0bea63804d05 


80a0d154506b37c4 
bbhebe3b3bb7fefab 


fb90a8a7b6dealbfe 
65234d5b5049e665 


£517b690d940a294 
e4dd663£44d313be 


b70883992932880d 
dcS5dd7cl2blcb6e3 


b2a2be77b0fcE3bE 
50£ca57291e19874 


8575839b0£08472b 
bd7176bd099bb2£2 


4405d2765de0adfc 


Oct5£4bde5977c54 


O00e8e32076ablaft 
43b£4eb269a2650c 


£O376d£feeftf4a7 
69£a5896969e85b8 


2£ad194272cda857 
ddb519d663b7b6ec 


9ae56936eC95325ac 
04ceb04676619057 


d94ccb853£53433b 
dcdc0£45813fb5a2 


837£8075d2945995 
272b65£79a91419d8 


78 6bde689f7aab2d 
566586e69ad3£487 


276457£01812aa6f 
e78fb8b0dfbbcb62f 


Ode519£f5d6c2c298 
5ca3e5cd1a30b954 


54314dff£825e2b22 
b8la5le0c96cc£77 


5d3£98dd7b29c363 
95d49494f5a0d14a 


5e9da426aa7d4a58 
d22cccad2e391cd4 


3b62dd973298ea43 
aceb5d06101e514e 


£d258ff809b2253d 
26c991e85352da6ft 


b462a20846af417d 
291eee54c034c326 


d5471e3dc7171224 
Oaaf99c59e7fadbd 


9ace856bal290e6e 
658f0bea63804d05 


80a0d154506b37c4 
bbhebe3b3bb7fefab 


fb90a8a76dealbfe 
65234d5b5049e665 


£517b690d940a294 
e4dd663£44d313be 


b70883992932880d 
dcS5dd7cl2blcb6e3 


b2a2be77b0f£cE3bE 
50£ca57291e19874 


8575839b0£08472b 
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044943c2992cc0£0 


bf£2324a9a363abe7 
Ocf£5f£4bde5977c54 


O00e8e32076ablaft 
43bf4eb269a2650c 


£03 76dffeeftf4a7 
69fa5896969e85b8 


2f£ad194272cda857 
ddb519d663b7b6ec 


9ae56936eE95325ac 
04ceb04676619057 


d94ccb853£53433b 
dcdc0£45813fb5a2 


837£8075d2945995 
272b65£79a91419d8 


786bde689f7aab2d 
566586e69ad3£487 


276457£01812aa6f 
e78fb8b0dfbbcb2f 


Ode519£f5d6c2c298 
5ca3e5cd1a30b954 


54314df£825e2b22 
b8la5le0c96cc£tT7 


5d3£98dd7b29c363 
95d49494f5a0d14a 


5e9da426aa7d4a58 
d22cccad2e391cd4 


3b62dd973298ea43 
aceb5d06101e514e 


£d258f£809b2253d 
26c991e85352da6ft 


b462a20846af 417d 
291leee54c034c326 


d5471e3dc7171224 
Oaaf99c59e7fadbd 


9ace856bal290e6e 
658f0bea63804d05 


80a0d154506b37c4 
bbebe3b3bb7fefab 


fb90a8a7b6dealbfe 
65234d5b5049e665 


£517b690d940a294 
e4dd663f44d313be 


b70883992932880d 
dc5dd7cl2blcb6e3 


b2a2be77b0fc£3bEt 


d491e309141dcaa3 


aéb8aefd086d33ce 
044943c2992cc0f0 


bf£2324a9a363abe7 
Ocf£5f£4bde5977c54 


O00e8e32076ablaft 
43bf£4eb269a2650c 


£03 76dffeeftf4a7 
69fa5896969e85b8 


2f£ad194272cda857 
ddb519d663b7b6ec 


9ae56936e95325ac 
04ceb04676619057 


d94ccb853£53433b 
dcdc0f£45813fb5a2 


837£8075d2945995 
272b65£79a91419d8 


786bdeb689f7aab2d 
566586e69ad3 £487 


276457£01812aa6f 
e78fb8b0dfbbcb62£ 


Ode519£5d6c2c298 
5ca3e5cd1a30b954 


54314df£825e2b22 
b8la5le0c96ccfT77 


5d3£98dd7b29c363 
95d49494f5a0d14a 


5e9da426aa7d4a58 
d22cccad2e391cd4 


3b62dd973298ea43 
aceb5d06101e514e 


£d258f£809b2253d 
26c991e85352da6ft 


b462a20846af 417d 
291eee54c034c326 


d5471e3dc7171224 
Oaaf99c59e7fadbd 


9ace856bal290e6e 
658f0bea63804d05 


80a0d154506b37c4 
bbebe3b3bb7fefab 


fb90a8a7b6dealbfe 
65234d5b5049e665 


£517b690d940a294 
e4dd663£44d313bec 


b70883992932880d 


=41: 


=42: 


7ca4916£2cd8db10 


eec6fca5aa657661 
7Tbe0b7e70bdabe53 


bb3£cd7585b59e32 
2201c7cbhd34e3lfe 


0e109efc47927341 
d43e5686506fa05d 


55c0dba83bcdc6e0 
5b634502£1671535 


£5756£847bfaefo7 
e2d307£d94f4818a 


£1438c9cf271c06e 
ad8acled966b2dc6 


a7dcaffdbefb9d4a 
9e46e9f915099C34 


985ba373680b8e94 
7d4c0abc676bla8sb 


807£45784852303f 
082ee70d3£352aac 


d9c523173blale05 
e301dca32c44ca05 


bod£019ca515cafb 
754b3a461a665640 


427a642921b2e645 
08a30fefe981f2ec 


Taab58dbelb9df7b 
2749c52d0b3d1225 


974ddd552aecl6ce 
a9eb6cbhfb416a591Ff 


55e0b99d4404f6ca 
6c24ad697b41b1b9 


901£632579eeleee 
4ee99476dblbb7a9 


£90db9£292a60463 
5401644992al1f8b8 


96906a7d£1007357 
£5e402ee21db8915 


7la0a998fb48c0fc 
96bece755cd203cb 


c25e€798e50752535 
9d548440d8e110£2 


1ce4f£2591812e6ae 
b27252537a83cf27 


c1700e250dcoffed 
970088839126bda5 


£8e6924412fd0c64 
d50c£4£73910e3ee 


bd7176bd099bb2£2 


4405d2765de0adfc 
7ca4916£2cd8db10 


eec6fca5aa657661 
Tbe0b7e70bdabe53 


bb3£cd7585b59e32 
2201c7cbd34e3lfe 


0el109efc47927341 
d43e5686506fa05d 


55c0dba83bcdc6e0 
5b634502£1671535 


£5756£847bfaefo7 
e2d307£fd94f4818a 


£1438c9cf271c06e 
ad8acled966b2dc6 


al7dcaffdbefb9d4a 
9e46e9f915099C34 


985ba373680b8e94 
7d4c0abc676bla8sb 


807£45784852303f 
082ee70d3£352aac 


d9c523173blale05 
e301dca32c44ca05 


bodf£019ca515cafb 
754b3a461a665640 


427a642921b2e645 
O08a30fefe981f2ec 


Taab58dbelb9df7b 
2749c52d0b3d1225 


974ddd552aecl6ce 
a9e6cbhfb416a591Ff 


55e0b99d4404f6ca 
6c24ad697b41b1b9 


901£632579eeleee 
4ee99476dblbb7a9 


£90db9£292a60463 
5401644992al1f8b8 


96906a7d£1007357 
£5e402ee21db8915 


7la0a998fb48c0fc 
96bece755cd203cb 


c25e798e50752535 
9d548440d8e110£2 


1lce4f£2591812e6ae 
b27252537a83cf27 


c1700e250dcoffed 
970088839126bda5 


a 


50£ca57291e19874 


8575839b0£08472b 
bd7176bd099bb2£2 


4405d2765de0adfc 
7ca4916£2cd8db10 


eec6fca5aa657661 
Tbhe0b7e70bdabe53 


bb3f£cd7585b59e32 
2201c7cbhd34e3lfe 


0e109efc47927341 
d43e5686506fa05d 


55c0dba83bcdc6e0 
5b634502f1671535 


£5756f847bfaefo7 
e2d307f£d94f4818a 


£1438c9cf271c06e 
ad8acled966b2dc6 


a7dcaffdbefb9d4a 
9e46e9f915099C34 


985ba373680b8e94 
7d4c0abc676bla8b 


807£45784852303f 
082ee70d3£f352aac 


d9c523173blale05 
e301dca32c44ca05 


bédf£019ca515cafb 
754b3a461a665640 


427a642921b2e645 
08a30fefe981f2ec 


Jaab58dbelb9df7b 
2749c52d0b3d1225 


974ddd552aecl6ce 
a9eb6cbhfb416a591Ff 


55e0b99d4404f6ca 
6c24ad697b41b1b9 


901£632579eeleee 
4ee99476dblbb7a9 


£90db9£292a60463 
5401644992a1f8b8 


9b906a7d£1007357 
£5e402ee21db8915 


Tla0a998fb48c0fc 
96bece755cd203cb 


c25e798e50752535 
9d548440d8e110£2 


1lce4f£2591812e6ae 
b27252537a83cf27 


dc5dd7cl2blicb6e3 


b2a2be77b0fc£3bE 
50£fca57291e19874 


8575839b0£08472b 
bd7176bd099bb2£2 


4405d2765de0adfc 
7ca4916£2cd8db10 


eec6fca5aa657661 
Tbhe0b7e70bdabe53 


bb3f£cd7585b59e32 
2201c7cbhd34e3lfe 


0e109efc47927341 
d43e5686506fa05d 


55c0dba83bcdc6e0 
5b634502f1671535 


£5756£f847bfaefo7 
e2d307£d94f4818a 


£1438c9cf271c06e 
ad8acled966b2dc6 


a7dcaffdbefb9d4a 
9e46e9f915099C34 


985ba373680b8e94 
7d4c0abc676bla8b 


807£45784852303f 
082ee70d3£352aac 


d9c523173blale05 
e301dca32c44ca05 


bedf£019ca51l5cafb 
754b3a461a665640 


427a642921b2e645 
08a30fefe981f2ec 


Jaab58dbelb9df7b 
2749c52d0b3d1225 


974ddd552aecl6ce 
a9eb6cbhfb416a591Ff 


55e0b99d4404f6ca 
6c24ad697b41b1b9 


901£632579eeleee 
4ee99476dblbb7a9 


£90db9£292a60463 
5401644992a1f8b8 


9b906a7d£1007357 
£5e402ee21db8915 


Tla0a998fb48c0fc 
96bece755cd203cb 


c25e798e50752535 
9d548440d8e110£2 


=62: d53e0a39eee47528 £8e6924412fd0c64 c1700e250dcoffed lce4£2591812e6ae 
1b6d7234acel5d7d d50c£4£73910e3ee 970088839126bda5 b27252537a83c£27 
=63: 3960545ab926c0d5 d53e0a39eee47528 £8e6924412fd0c64 c1700e250dcoffed 
Yeabb5618b4fcdl13 1b6d7234acel5d7d d50c£4£73910e3ee 970088839126bda5 
= 64: b2clo64d7labb92fe 3960545ab926c0d5 d53e0a39eee47528 £8e6924412fd0c64 
£173 6fbbftbb6ebe72 Yeabb5618b4fcdl13 lb6d7234acel5d7d d50c£4£73910e3ee 
=65: 4d979e985b067e75 b2clo4d7labb92fe 3960545ab926c0d5 d53e0a39eee47528 
d1l£b300£35992350 £173 6fbbfbb6ebe72 9Yeabb5618b4fcdl13 1lb6d7234acel5d7d 
=66: 59d0238ce137abd7 4d979e985b067e75 b2cl64d7labb92fe 3960545ab926c0d5 
5£3c64b7546e2cec d1£b300£35992350 £173 6fbbftbo6ebe72 9Yeabb5618b4fcdl13 
= 67 b£8d9453b9876b0a 59d0238ce137abd7 4d979e9 85b067e75 b2cl64d7labb92fe 
6c27893a31b0e07e 5£3c64b7546e2cec d1l£b300£35992350 £173 6fbbftbb6ebe72 
=68 : c45dd4a2d2fea059 b£8d9453b9876b0a 59d0238cel37abd7 4d979e985b067e75 
48253e21b26d8cf£9 6c27893a31b0e07e 5£3c64b7546e2cec d1l£b300£35992350 
= 69 : €08471946c17b0b6 c45dd4a2d2fea059 b£8d9453b9876b0a 59d0238cel37abd7 
714e2adf4e23f£f24 48253e21b26d8cf£9 6c27893a31b0e07e 5£3c64b7546e2cec 
= 70 b4838clc28feelbc €08471946c17b0b6 c45dd4a2d2fea059 b£8d9453b9876b0a 
371£12£€333£7e5b9 714e2adf4e23f£f24 48253e21b26d8cf9 6c27893a31b0e07e 
=71: 851cf60a77£6e6d1 b4838clc28feelTbc €08471946c17b0b6 c45dd4a2d2fea059 
a2a475deac0e8b42 371£12E333£7e5b9 714e2adf4e23f£24 48253e21b26d8cf9 
=72: £53d23c50249af2d 851cf60a77£6e6d1 b4838clc28feel7bc €08471946c17b0b6 
le99cae9d4cf0409 a2a475deac0e8b42 371£12E333£7e5b9 714e2adf4e23f£24 
= 73 b81e85d427045550 £53d23c50249af2d 851cf60a77£6e6d1 b4838clc28feel7bc 
£5794711faa60f63 le99cae9d4cf0409 a2a475deac0e8b42 371£12E333£7e5b9 
=74: ae70c7dllea84a83 b81e85d427045550 £53d23c50249af2d 851cf60a77£6e6d1 
dc0d633411c289b2 £5794711faa60f63 le99cae9d4cf0409 a2a475deac0e8b42 
= 75 5c54592e13c76135 ae70c7d1llea84a83 b81e85d427045550 £53d23c50249af2d 
1620dd5479e94b9b dc0d633411c289b2 £5794711faac60f63 le99cae9d4c£0409 
= 76 03a0£79087078a93 5c54592e13c76135 ae70c7dllea84a83 b81e85d427045550 
57e90fa678e4cc97 1620dd5479e94b9b dc0d633411c289b2 £5794711faacb0f63 
=77: 8df0baad4c6ed50c 03a0£79087078a93 5c54592e13c76135 ae70c7dllea84a83 
c6e7246£7£0bdac6 57e90fa678e4cc97 1620dd5479e94b9b dc0d633411c289b2 
= 78 bfa9f194894db5b6 8dft0baad4c6ed50c 03a0£79087078a93 5c54592e13c76135 
90bb8597bb4l1ldala c6e7246£7£0bdac6 57e90fa678e4cc97 1620dd5479e94b9b 
=79 4b7c99fbat72a571 bfa9f£194894db5b6 8df0baad4c6ed50c 03a0£79087078a93 
78955227fde03a42 90bb8597bb4ldala c6e7246£7£0bdac6 57e90fa678e4cc97 


That completes the processing of the second and final message block, M“. The final hash value, 


H®, is calculated to be 





H® = 4319017a2b706e69 4b7c99fbaf72a571 8e959b75dae313da 
H\” = ca4p05938bae5e89 bfa9£194894db5b6 8c£4£72814£c143£ 
HY = 0186b£199£30aa95 8d£0baad4c6ed50c 8£7779c6eb9f7fal 
HY = 6ef8b7142£810585 03a0£79087078a93 7299aeadb6889018 
Hi = a787146764b20bda2 78955227£de03a42 501d289e4900£7e4 
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H®& = 0260144709736920 + 90bb8597bb4idala = 331b99dec4b5433a 
H® = 00ec057£37d14b8e + c6e7246£7£0bdac6 = c7d329eeb6dd2654 
H® = o6add5b50e671c72 + 57e90fa678e4cc97 = 5e96e55b874be909. 


The resulting 512-bit message digest is 
8e959b75dae313da 8cf4£72814fcl43f 8£7779cbeb9F7£al 7299aeadb6889018 


501d289e4900f7e4 331b99dec4b5433a c7d329eeb6dd2654 5e96e55b874be909. 


C.3  SHA-512 Example (Long Message) 


Let the message M be the binary-coded form of the ASCII string which consists of 1,000,000 
repetitions of the character “a”. The resulting SHA-512 message digest is 


e718483d0ce76964 4e2e42c7bc15b463 8e1lf98b13b204428 5632a803afa973eb 


deOfF244877ea60a 4ch0432ce577c31lb eb009cS5c2c49aa2e 4eadb217ad8cc09b. 


55 


APPENDIX D: SHA-384 EXAMPLES 


This appendix is for informational purposes only and is not required to meet the standard. 


D.1 SHA-384 Example (One-Block Message) 


Let the message, M, be the 24-bit (¢= 24) ASCII string "abc", which is equivalent to the 
following binary string: 


01100001 01100010 01100011. 


The message is padded by appending a 'L" bit, followed by 871 'D" bits, and ending with the 
hex value 
0000000000000000 0000000000000018 


(the two 64-bit word representation of the length, 24). Thus, the final padded message consists 
of one block (N = 1). 


For SHA-384, the initial hash value, H, is 


H§? = cbhbb9d5dc1059ed8 
H{ = 629a292a367cd507 
HS = 9159015a3070dd17 





HS? = 152fecd8£70e5939 
H{ = 67332667f£fc00b31 
H® = 8eb44a8768581511 
H® = db0c2e0d64f£98fa7 
H = 47p5481dbefa4fad4. 


The words of the padded message block are then assigned to the words Wo,...,Wis of the message 
schedule: 


Wo = 6162638000000000 Ws = 0000000000000000 
W,; = 0000000000000000 Wo = 0000000000000000 
W2 = 0000000000000000 Wio = 0000000000000000 
W3 = 0000000000000000 Wi O0000000000000000 
Ws, = 0000000000000000 Wi2 = 0000000000000000 
Ws = 0000000000000000 Wi3 O0000000000000000 
We = 0000000000000000 Wi O0000000000000000 
W; = 0000000000000000 Wis 0000000000000018. 


The following schedule shows the hex values for a, b, c, d, e, f, g, and h after pass t of the “for t 
= 0 to 79” loop described in Sec. 6.3.2, step 4. 


t= 0: 
t= 1 
f= 32,4 
f= 3-4 
t= 4: 
iS 3:3 
t= 6: 
t= 7: 
t= 8: 
t= Ors 
t =10 
t=11 
t =12 
t =13 
t =14 
t =15 
t =16 
t =17 
t =18 
t =19 


a 
/ 
e 


470994ad30873£88 
bd03£724be6075£9 


2€91230306al2ae0 
5e1b4e1695372b9e 


eebe5d379be707ad 
54074a65aef34336 


€308483153el15ad6 
086c5b2d36a89178 


3a7a023c593d8479 
8aal144850633794 


333199a85£92b052 
7a6316£0ef047ce7 


76£0741213dd2ef6 
74063cba385£0675 


O02£2a04d3aab1629 
1688b9b£14980£c0 


73e5b2a1704a0349 
£d00139£705907d0 


bf£3£67ba1l2882648 
652e311d4£0a4257 


33254508bb2ea48d 
9e18991c4£39£0ba 


clfdb2a0205ea0e5 
04732e8bc4044582 


185f9ff038a50f39 
8b4acfc4d2b8afe6 


e5£06744c0d7563a 
2f£a93d1ce9523015 


7e32dc0e9f414783 
3a9950aaad5e75884 


leab6159ae87ef6d 
153b895cfbc436c5 


33ef2cebbf1739aa 
9dla64bafl1ld366aa 


Td£f1b65f£1b87db6ca 
5b6e369d36e8e181 


63a24014a34bb0f6 
e13e610eae680d85 


flaabd313309509b 
674385£0d87db94£ 


b 
/ 
i 


cbhbb9d5dc1059ed8 
67332667££c00b31 


470994ad30873£88 
bd03£724be6075£9 


2€91230306al2ae0 
5e1lb4e1695372b9e 


eebe5d379be707ad 
54074a65aef34336 


€308483153e15ad6 
086c5b2d36a89178 


3a7a023c593d8479 
8aal144850633794 


333199a85f92b052 
7a6316£0ef047ce7 


76£0741213dd2ef6 
74063cba385£0675 


O02f2a04d3aab1629 
1688b9b£14980£c0 


73e5b2a1704a0349 
£d00139£705907d0 


bf£3£67ba1l2882648 
652e311d4£0a4257 


33254508bb2ea48d 
9e18991c4£39£0ba 


clfdb2a0205ea0e5 
04732e8bc4044582 


185f9ff038a50f39 
8b4acfc4d2b8afe6 


e5£06744c0d7563a 
2£fa93d1ce9523015 


T7e32dc0e9f414783 
3a9950aaa5e75884 


leab6159ae87efb6d 
153b895cfbc436c5 


33ef2cebbf1739aa 
9dla64bafl1ld366aa 


Tdf1lb65f1b87db6ca 
5b6e369d36e8e181 


63a24014a34bb0f6 
e13e610eae680d85 


57 


c 
/ 
& 


629a292a367cd507 
8eb44a8768581511 


cbbb9d5dc1059ed8 
67332667££c00b31 


470994ad30873£88 
bd03£724be6075£9 


2€91230306al2ae0 
5e1b4e1695372b9e 


eebe5d379be707ad 
54074a65aef34336 


€308483153el15ad6 
086c5b2d36a89178 


3a7a023c593d8479 
8aal144850633794 


333199a85£92b052 
7a6316£0ef047ce7 


76£0741213dd2ef6 
74063cbha385£0675 


02f2a04d3aab1629 
1688b9b£14980£c0 


73e5b2a1704a0349 
£d00139£705907d0 


b£3£67bal1l2882648 
652e311d4£0a4257 


33254508bb2ea48d 
9e18991c4£39£0ba 


clfdb2a0205ea0e5 
04732e8bc4044582 


185f9ff038a50f39 
8b4acfc4d2b8afe6 


e5£06744c0d7563a 
2£a93d1ce9523015 


Te32dc0e9f414783 
3a9950aaad5e75884 


leab6159ae87efb6d 
153b895cfbc436c5 


33ef2cebbf1739aa 
9dla64bafl1d366aa 


Td£1be65f£1b87db6ca 
5b6e369d36e8e181 


d 
/ 
h 


9159015a3070dd17 
db0c2e0d64f98fa7 


629a292a367Ccd507 
8eb44a8768581511 


cbbb9d5dc1059ed8 
67332667££c00b31 


470994ad30873£88 
bd03£724be6075£9 


2€91230306al2ae0 
5e1b4e1695372b9e 


eebe5d379be707ad 
54074a65aef34336 


€308483153el15ad6 
086c5b2d36a89178 


3a7a023c593d8479 
8aal144850633794 


333199a85£92b052 
7a6316f0ef047ce7 


76£0741213dd2efo6 
74063cba385£0675 


02f2a04d3aab1629 
1688b9b£14980£c0 


73¢5b2a1704a0349 
£d00139£705907d0 


b£3£67bal1l2882648 
652e311d4£0a4257 


33254508bb2ea48d 
9e18991c4f£39f£0ba 


clfdb2a0205ea0e5 
04732e8bc4044582 


185f9ff038a50f39 
8b4acfc4d2b8afe6 


e5£06744c0d7563a 
2fa93d1ce9523015 


Te32dc0e9f414783 
3a9950aaa5e75884 


leab6159ae87efb6d 
153b895cfbc436c5 


33ef2cebbf1739aa 
9dla64bafl1d366aa 


= 21 2 


=22.: 


=24: 


=27 2 


= 29: 


= 30: 


=31: 


= 32: 


= 33: 


= 34: 


=35: 


= 36: 


=37' 2 


= 38 : 


= 39: 


=41: 


=42: 


9ba737ae88a7l2cb64 
3£02614c43906c0f 


042c2dc9a5bFt558a 
19316bebc88e01F2 


7799c7T5acc7T48c0Ff 
a7Tbbd65bf64f£58c8 


ccf99a80F92ZbF002 
e52a24fae4e8fc9b 


ae993474363efe68 
587£308d58681928 


335063dla2aec92Ff 
c2d6d65e38cb6ea79 


53a78b0cca01ba37 
3b65a26c3c92c8F3 


ab7££a529£622930 
b9d8a2£F2762901lea 


e428bb43afe3d63e 
6a8527525£898726 


bbed541a5128088c 
7973aadbde294be9 


4c5c38df7ec8baf4 
422ceea0200e9ee4 


4ba456ec244033ed 
7c£40857056d8 6b0 


aa4abab2ac5f5dd8 
ad2blecfb5bfc556 


9cb941£2ced774b3 
029£66c7b4569bEF0 


39265£358594de27 
3£7b1c260c82e54F 


09cca487d39b02al 
4a22b37b58a5b1b0 


d48d97ce438cf4£0 
a239e00b8baa0410 


def4le25a8bo634d6 
25755cb8179dd0b0 


54078334358573b4 
0e419fb0802b0efc 


db24f9a03f4ff£f6b 
d30e99b4b394b090 


3604c53a845efc37 
791b2b4af7338b99 


f41b1c0eee8 9bdc6 
e319b77d9e4e87f9 


36644ae374632e3a 
458250878a3972b2 


88806f6ae9fcd65b 


flaabd313309509b 
674385£0d87db94£ 


9ba737ae88a7l2cb64 
3£02614c43906c0f 


042c2dc9a5bFE558a 
19316bebc88e01F2 


7799c7T5acc7T48c0f 
a7bbd65bf64£58c8 


ccf99a80F92ZbF002 
e52a24fae4e8fc9b 


ae993474363efe68 
587£308d58681928 


335063dla2aec92Ff 
c2d6d65e38cb6ea79 


53a78b0cca01ba37 
3b65a26c3c92c8F3 


ab7f££a529£622930 
b9d8a2£F2762901lea 


e428bb43afe3db63e 
6a8527525£898726 


bbed541a5128088c 
7973aadbde294be9 


4c5c38df7ec8baf4 
422ceea0200e9ee4 


4ba456ec244033ed 
7¢£40857056d8 6b0 


aa4abab2ac5f5dd8 
ad2blecfb5bfc556 


9cb941£2ced774b3 
029£66c7b4569bEF0 


39265£358594de27 
3£7b1c260c82e54F 


09cca487d39b02al 
4a22b37b58a5b1b0 


d48d97ce438cf4£0 
a239e00b8baa0410 


def41e25a8bo634d6 
25755cb8179dd0b0 


54078334358573b4 
0e419fb0802b0efc 


db24f9a03f4fff6b 
d30e99b4b394b090 


3604c53a845efc37 
791b2b4af7338b99 


f41b1c0eee8 9bdc6 
e319b77d9e4e87£9 


36644ae374632e3a 


58 


63a24014a34bb0f6 
e13e610eae680d85 


flaabd313309509b 
674385£0d87db94£ 


9ba737ae88a7l2cb64 
3£02614c43906c0f 


042c2dc9a5bFE558a 
19316bebc88e01F2 


71799c7T5acc7T48c0f 
a7bbd65bf64£58c8 


ccf99a80F92ZbF002 
e52a24fae4e8fc9b 


ae993474363efe68 
587£308d58681928 


335063dla2aec92Ff 
c2d6d65e38cb6ea79 


53a78b0cca01ba37 
3b65a26c3c92c8F3 


ab7££a529£622930 
b9d8a2£2762901lea 


e428bb43afe3d63e 
6a8527525£898726 


bbed541a5128088c 
1973aadbde2 94be9 


4c5c38df7ec8baf4 
422ceea0200e9ee4 


4ba456ec244033ed 
7c£40857056d86b0 


aa4abab2ac5f5dd8 
ad2blecfb5bfc556 


9cb941£2ced774b3 
029f£66c7b4569bEF0 


39265£358594de27 
3£7b1c260c82e54F 


09cca487d39b02al 
4a22b37b58a5b1b0 


d48d97ce438cf4£0 
a239e00b8baa0410 


def41e25a8bo34d6 
25755cb8179dd0b0 


54078334358573b4 
0e419Fb0802b0efc 


db24f9a03f4ff£f6b 
d30e99b4b394b090 


3604c53a845efc37 
791b2b4aE7338b99 


f41b1c0eee8 9bdc6 


Td£1lbe65f£1b87db6ca 
5b6e369d36e8e181 


63a24014a34bb0f6 
e13e610eae680d85 


flaabd313309509b 
674385£0d87db94£ 


9ba737ae88a72cb64 
3£02614c43906c0f 


042c2dc9a5bf558a 
19316bebc88e01F2 


71799cT5acc7T48c0f 
a7bbd65bf64f£58c8 


ccf99a80F92Zbf002 
e52a24fae4e8fc9b 


ae993474363efe68 
587£308d58681928 


335063dla2aec92Ff 
c2d6d65e38cb6ea79 


53a78b0cca01ba37 
3b65a26c3c92c8F3 


ab7££a529£622930 
b9d8a2£2762901lea 


e428bb43afe3d63e 
6a8527525£898726 


bbed541a5128088c 
1973aadbde2 94be9 


4c5c38df7ec8baf4 
422ceea0200e9ee4 


4ba456ec244033ed 
7c£40857056d86b0 


aa4abab2ac5f5dd8 
ad2blecfb5bfc556 


9cb941£2ced774b3 
029£66c7b4569bE0 


39265£358594de27 
3£7b1c260c82e54F 


09cca487d39b02al 
4a22b37b58a5b1b0 


d48d97ce438cf4£0 
a239e00b8baa0410 


def41e25a8bo634d6 
25755cb8179dd0b0 


54078334358573b4 
0e419Fb0802b0efc 


db24f9a03f4ff£f6b 
d30e99b4b394b090 


3604c53a845efc37 


cfde2e6ea54fa576 


51dcaa36995c301d 
€37£778353998050 


ef5e3885a2f238dE£ 
740e347£24e18fda 


eb3753£4283f4818 
Oae48cf£840bb8be9 


a6998d63a5d09e04 
e21095012ece0b72a 


d3698fb64d£175b0 
c2£0b90f£ce80739 


317a3b295b991914 
lcoadff2e6cb5aa4d 


0941da08148ba463 
833eb9a4bb5a073e 


494ac238d68c3d0b 
80c8£c138e645028 


c87e9168db9e97de 
65cf7£6a829aca04 


edb4448879391dbb 
7729c85475dd318f 


073775c2456dc7db 
a9cca0b6266b1da77 


54de8857b24afaf7 
8de5lcf£2ae4b068 


8a9cdd80f7£09c05 
a60ba5e9ebaeb96a 


3eeb22a7T524d8da7£ 
e2e6830b139d£58f 


0ed77c9cde8883d3 
38413a2052387a9e 


e€64e4135£9d30dbec 
45b640454c75c349 


1ca93a293d544328 
efbef83a35c0319e 


3dc764£89e54043a 
a57784945550c£94 


56£b5883f1c87a05 
£5198a4leb80e022 


24a1124262a331c7 
06edacaebe7b54ad 


eb85d19201c89694 
9ced24983eec8723 


cc981lab3a59cldb4 
e€ac5516336bc8882 


ceef5d997e148b44 
617bb£70bb165212 


458250878a3972b2 


88806f6ae9fcdé65b 
cfde2e6ea54fa576 


51dcaa36995c301d 
€37£778353998050 


ef5e3885a2f238df£ 
740e347£24e18fda 


eb3753f£4283£4818 
Oae48cf£840bb8be9 


a6998d63a5d09e04 
e21095012ee0b72a 


d3698fb64d£175b0 
c2£0b90f£ce80739 


317a3b295b991914 
lcoadff2e6cb5aa4d 


0941da08148ba463 
833eb9a4bb5a073e 


494ac238d68c3d0b 
80c8£c138e645028 


c87e9168db9e97de 
65cf7f£6a829aca04 


edb4448879391dbb 
7729c85475dd318f 


073775c2456dc7db 
a9cca0b6266b1da77 


54de8857b24afaf7 
8de5lcff2ae4b068 


8a9cdd80f7£09C05 
ao60ba5e9ebaeb96a 


3eeb22a7T524d8da7£ 
e2e6830b139df£58f 


0ed77c9cde8883d3 
38413a2052387a9e 


e64e4135f£9d30dbec 
45b640454c75c349 


1ca93a293d544328 
efbef83a35c0319e 


3dc764£89e54043a 
a57784945550c£94 


56£b5883f1c87a05 
£5198a4leb80e022 


24a1124262a331c7 
06edacaebe7b54ad 


eb85d19201c89694 
9ced24983eec8723 


cc981lab3a59cldb4 
e€ac5516336bc8882 


59 


e319b77d9e4e87£9 


36644ae374632e3a 
458250878a3972b2 


88806f6ae9fcdé65b 
cfde2e6ea54fa576 


51ldcaa36995c301d 
e€37£778353998050 


ef5e3885a2f238d£ 
740e347£24e18fda 


eb3753£4283f£4818 
Oae48cf£840bb8be9 


a6998d63a5d09e04 
e21095012ece0b72a 


d3698fb64d£175b0 
c2£0b90f£ce80739 


317a3b295b991914 
lcadff2e6cb5aa4d 


0941da08148ba463 
833eb9a4bb5a073e 


494ac238d68c3d0b 
80c8£c138e645028 


c87e9168db9e97de 
65cf7£6a829aca04 


edb4448879391dbb 
7729c85475dd318£ 


073775c2456dc7db 
a9cca0b6266b1da77 


54de8857b24afat7 
8de5lcf£2ae4b068 


8a9cdd80f7£09c05 
a60bad5e9ebaeb96a 


3eeb22a7T524d8da7£ 
e2e6830b139df58f 


0ed77c9cde8883d3 
38413a2052387a9e 


e64e4135f£9d30dbec 
45b640454c75c349 


1ca93a293d544328 
efbef83a35c0319e 


3dc764£89e54043a 
a57784945550c£94 


56fb5883f1c87a05 
£5198a4leb80e022 


24a1124262a331c7 
06edacaebe7b54ad 


eb85d19201c89694 
9ced24983eec8723 


791b2b4aE7338b99 


f41b1c0eee8 9bdc6 
e319b77d9e4e87£9 


36644ae374632e3a 
458250878a3972b2 


88806f6ae9fcdé65b 
cfde2e6ea54fa576 


51dcaa36995c301d 
€37£778353998050 


ef5e3885a2f238df 
740e347£24e18fda 


eb3753£4283£4818 
Oae48cf£840bb8be9 


a6998d63a5d09e04 
e21095012ece0b72a 


d3698fb64d£175b0 
c2£0b90f£ce80739 


317a3b295b991914 
lcadff2e6cb5aa4d 


0941da08148ba463 
833eb9a4bb5a073e 


494ac238d68c3d0b 
80c8£c138e645028 


c87e9168db9e97de 
65cf7£6a829aca04 


edb4448879391dbb 
7729c85475dd318£ 


073775c2456dc7db 
a9cca0b6266b1da77 


54de8857b24afaf7 
8de5lcf£2ae4b068 


8a9cdd80f7£09C05 
ao0bad5e9ebaeb96a 


3eeb22a7T524d8da7£ 
e2e6830b139d£58f 


0ed77c9cde8883d3 
38413a2052387a9e 


e64e4135f£9d30dbe 
45b640454c75c349 


1ca93a293d544328 
efbef83a35c0319e 


3dc764£89e54043a 
a57784945550c£94 


56£fb5883£f1c87a05 
£5198a4leb80e022 


24a1124262a331c7 
06edacaebe7b54ad 


= 67 689edf608a8e3f14 ceef£5d997e148b44 cc98lab3a59cldb4 eb85d19201c89694 
3280d88472c100fd 617bb£70bb165212 e€ac5516336bc8882 9ced24983eec8723 
=68: le6e0255ab88079£ 689edf608a8e3f14 ceef£5d997e148b44 cc98lab3a59cldb4 
£2001138439902b1 3280d88472c100fd 617bb£70bb165212 e€ac5516336bc8882 
= 69 : 8c5d3b7fdad66e70 le6e0255ab88079£ 689edf£608a8e3f14 ceef5d997e148b44 
90d18ec8b69f0345 £2001138439902b1 3280d88472c100fd 617bb£70bb165212 
= 70 32e5ed8655871e9b 8c5d3b7fdad66e70 le6e0255ab88079£ 689edfo608a8e3f14 
51105£6241313777 90d18ec8b69f0345 £2001138439902b1 3280d88472c100fd 
= 71.2 bcd5061679be7336 32e5ed8655871e9b 8c5d3b7fdad66e70 le6e0255ab88079£ 
454b99£654443ad0 51105£6241313777 90d18ec8b69f0345 £2001138439902b1 
=72: e€7d913b6678e78ef bcd5061679be7336 32e5ed8655871e9b 8c5d3b7fdad66e70 
1££613b5aa63776e 454b99f654443ad0 51105£6241313777 90d18ec8b69£0345 
= 73 e6b8cb8dfa3475ab e€7d913b6678e78ef bcd5061679be7336 32e5ed8655871e9b 
2e75£34303d39bb0 1££613b5aa63776e 454b99£654443ad0 51105£6241313777 
=74: fdd4a30e168c4ae5 e6b8cbh8dfa3475ab e€7d913b6678e78ef bcd5061679be7336 
83a35dbe2a64fc26 2e75£34303d39bb0 1££613b5aa63776e 454b99£654443ad0 
= 75 12aeb6268dfa3el4 fdd4a30el168c4ae5 e6b8cb8dfa3475ab e7d913b6678e78ef 
£660943b276786£7 83a35dbe2a64fc26 2e€75£34303d39bb0 1££613b5aa63776e 
= 76 055b73814cf£102b4 12aeb6268dfa3el4 fdd4a30e168c4ae5 e6b8cb8dfa3475ab 
c4b149710£5d6a71 £660943b276786£7 83a35dbe2a64fc26 2e€75£34303d39bb0 
= 77": 95d33150de6df44c 055b73814cf£102b4 12aeb6268dfa3el4 fdd4a30el168c4ae5 
cT£E7TbELO8eb£0d30 c4b149710£5d6a71 £660943b276786£7 83a35dbe2a64fc26 
= 78 5306143 £64497b00 95d33150de6df44c 055b73814cf£102b4 12aeb6268dfa3el4 
ca06a219cc701096 cT£E7TbELO8eb£0d30 c4b149710£5d6a71 £660943b276786£7 
= 79 ££44d7e184 9dbfb3 5306143£64497b00 95d33150de6df44c 055b73814cf£102b4 
1952e0c3a227c0F2 ca06a219cc701096 cT£E7TbELO8eb£0d30 c4b149710£5d6a71 


That completes the processing of the first and only message block, M“’’. The final hash value, 


H', is calculated to be 


Hi cbbb9d5dc1059ed8 ££44d7e1849db£b3 cb00753£45a35e8b 
A 629a292a367cd507 5306143£64497b00 b5a03d699ac65007 
HY 9159015a3070dd17 95d33150de6d£44c 272c32ab0eded163 
Hy” 152fecd8£70e5939 055b73814c£102b4 1a8b605a43££5bed 
H 67332667££c00b31 1952e0c3a227c0£2 8086072bale7cc23 
A! 8eb44a8768581511 ca06a219cc701096 58baecal34c825a7 
He: db0c2e0d64£98fa7 c7£TbELO8eb£0d30 a303ed£d£3b89cda7 
H\” = 47p5481dbefa4ta4 c4b149710f5d6a71 0c66918ece57bal5. 


The final hash value is truncated to its left-most 384 bits (ie., H$”,...,H$”), resulting in the 384-bit 
message digest 


cbh00753£45a35e8b b5a03d699ac65007 272c32ab0eded163 la8b605a43ff£5bed 


8086072bale7cc23 58baecal34c825a7. 
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D.2 SHA-384 Example (Multi-Block Message) 


Let the message, M, be the 896-bit (/ = 896) ASCII string 


The message is padded by appending a "1" bit, followed by 1023 '0" bits, and ending with the 


hex value 


(the two 64-bit word representation of the length, 896). Thus, the final padded message consists 


"abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmn 
hijklmnoijkImnopjklmnopqkImnopqrImnopqrsmnopgqrstnopqrstu". 


0000000000000000 0000000000000380 


of two blocks (N = 2). 


For SHA-384, the initial hash value, H, is 


HS? = cbhbb9d5dc1059ed8 
H{ = 629a292a367cd507 
HS = 9159015a3070dd17 
H{? = 152fecd8£70e5939 
H{® = 67332667f£c00b31 
H® = 8eb44a8768581511 
H® = db0c2e0d64f98fa7 
H = 47b5481dbefa4fad. 


The words of the padded message block are then assigned to the words Wo,...,W1s of the message 


schedule: 
Wo = 6162636465666768 We = 696ab6bb6c6d6e6f70 
W, = 6263646566676869 Wo = 6abbb6c6d6e6f7071 
W. = 636465666768696a Wio = 6b6c6d6e6f707172 
W3 = 6465666768696a6b Wi = 6c6d6e6£70717273 
W, = 65666768696a6b6c Wr = 6d6e6£7071727374 
Ws = 666768696a6b6c6d Wi 6e6£707172737475 
We = 6768696a6b6c6d6e Wi 8000000000000000 
W, = 68696a6b6c6d6e6f Wis OO0OO00000000000000. 





The following schedule shows the hex values for a, b, c, d, e, f, g, and h after pass t of the “for t 
=) to 79” loop described in Sec. 6.3.2, step 4. 
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Sh: 


= 12): 


=14: 


=17: 


=19: 


=21: 


10 : 


a 
/ 
e 


4709949195eda6f£0 
bd03£70923c6dd61 


78d3£8bc03a38303 
ae067£071cd18a36 


ed59d30bef £95306 
c180c7a74ed5cf1f 


8e7fe2aba3168£2b 
d92d19667920b327 


1174£9b374a9263a 
dd371£2d13661c52 


27aaafb7fbef806b 
2laf3c6430a9afIc 


b352d03a0bd34d65 
69397de9a30e1473 


412db7£990563d7c 
5062fd5924e2b62e 


0£79040546e6ed£7 
6b6c511b25ab6bdbe 


ebf£02410f£67b8ee7 
dac695b91543ae80 


97aa05d8 9b8dbebd 
83b8b72646c0b598 


23d0a36b692118eb 
a5f£6c5155e221e8c 


e€1041368d2fcala2 
ae01675b£b003180 


45bd6f69efec540d 
c35cc50clcf7ef98 


c237fa23abb9bcl16 
al6c4f£134b28923e 


b4092df1c0f81853 
008178e17£ab649F2 


21e5c91d11809c13 
a26dfa04ed8c9b63 


20957137cd4304a5 
6be210614b10949b 


2180e6lafe322bc7 
76396996200065£7 


£2911cllc9b6e5££5 
lbc2160f4f£3711dc 


5eab10b19a5143a8 
98d2b19d201f£2bb6 


29c5348d87cd5590 


b 
/ 


f 


cbhbb9d5dc1059ed8 
67332667££c00b31 


4709949195eda6£0 
bd03£70923c6dd61 


78d3£8bc03a38303 
ae067£071cd18a36 


ed59d30bef £95306 
c180c7a74ed5cf1lf 


8e7fe2aba3168£2b 
d92d19667920b327 


1174£9b374a9263a 
dd371£2d13661c52 


27aaafb7fbef806b 
2laf3c6430a9afIc 


b352d03a0bd34d65 
69397de9a30e1473 


412db7£990563d7c 
5062£d5924e2b62e 


0£79040546e6ed£7 
6b6c511b25ab6bdbec 


ebf£02410f£67b8ee7 
dac695b91543ae80 


97aa05d8 9b8dbebd 
83b8b72646c0b598 


23d0a36b692118eb 
a5f£6c5155e221e8c 


€1041368d2fcala2 
ae01675b£b003180 


45bd6f69efec540d 
ce35cc50clcf7ef98 


c237£fa23abb9bc16 
al6c4f£134b28923e 


b4092df1c0£81853 
008178e1l7£a649F2 


21e5c91d11809c13 
a26dfa04ed8c9b63 


20957137cd4304a5 
6be210614b10949b 


2180e6lafe322bc7 
76396996200065£7 


£2911cllc96e5fE5 
lbc2160f4£3711dc 


5eab10b19a5143a8 


62 


c 
/ 
& 


629a292a367cd507 
8eb44a8768581511 


cbbb9d5dc1059ed8 
67332667££c00b31 


4709949195eda6f0 
bd03£70923c6dd6l1 


78d3£8bc03a38303 
ae067£071cd18a36 


ed59d30bef £95306 
cl180c7a74ed5cflf 


8e7fe2aba3168£2b 
d92d19667920b327 


1174£9b374a9263a 
dd371£2d13661c52 


27aaafb7fbef806b 
2laf3c6430a9afIc 


b352d03a0bd34d65 
69397de9a30e1473 


412db7£990563d7c 
5062f£d5924e2b62e 


0£79040546eb6ed£7 
6b6c511b25ab6bdbc 


ebf02410£67b8ee7 
dac695b91543ae80 


97aa05d8 9b8dbebd 
83b8b72646c0b598 


23d0a36b692118eb 
a5f6c5155e221e8c 


e1041368d2fcala2 
ae01675b£b003180 


45bd6f69efec540d 
c35cc50clcf7ef98 


c237fa23abb9bc16 
al6c4£134b28923e 


b4092df1c0f81853 
008178e17£a649F2 


21e5c91d11809c13 
a26dfa04ed8c9b63 


20957137cd4304a5 
6be210614b10949b 


2180e6lafe322bc7 
76396996200065£7 


£2911cl1lc96e5fE5 


d 

/ 

h 
9159015a3070dd17 
db0c2e0d64f98fa7 


629a292a367cd507 
8eb44a8768581511 


cbbb9d5dc1059ed8 
67332667££c00b31 


4709949195eda6f0 
bd03£70923c6dd61 


78d3£8bc03a38303 
ae067£071cd18a36 


ed59d30bef £95306 
c180c7a74ed5cf1lf 


8e7fe2aba3168£2b 
d92d19667920b327 


1174£9b374a9263a 
dd371£2d13661c52 


27aaafb7fbef806b 
2laf3c6430a9afIc 


b352d03a0bd34d65 
69397de9a30e1473 


412db7£990563d7c 
5062f£d5924e2b62e 


0£79040546e6ed£7 
6b6c511b25ab6bdbec 


ebf£02410f£67b8ee7 
dac695b91543ae80 


97aa05d89b8dbeb6d 
83b8b72646c0b598 


23d0a36b692118eb 
a5f6c5155e221e8c 


e€1041368d2fcala2 
ae01675b£b003180 


45bd6f69efec540d 
c35cc50clcf7ef98 


c237fa23abb9bc16 
al6c4f£134b28923e 


b4092df1c0f81853 
008178e17£a649F2 


21e5c91d11809c13 
a26dfa04ed8c9b63 


20957137cd4304a5 
6be210614b10949b 


2180e6lafe322bc7 


=22'*: 


=24 : 


=27 : 


= 29: 


= 30: 


=31: 


= 32:2 


= 33: 


= 34: 


=35: 


= 36: 


= 37° 


= 38 : 


= 39: 


=41: 


=42: 


4324c8caccf7753c 


33ce6b4a0l166b7cI9c 
d49cef5bd2dec121 


ldb4ee606d2a7a96 
b17d15b397521ab3 


Scef5b2£00142660 
789e540£22e13932 


££74£4a162435903 
6c0be33dccb6e7572 


41740b736e9676a9 
d8e401251592dab6c 


931059fe9279ff1d 
7£31116887ecea596 


356d08d982e2ead4 
40c28c34blbbe906 


89dc825e7235c74b 
7a499ae05da50b£2 


97901 £333e662fdc 
4472b2e331ddfab4 


69c8E40eb38b6022 
177589502dd39aa2 


4920943ffe52b207 
6b813a0d0cd£4991 


b4cb0d£332d108ab 
8£e3d28097£18618 


e7748£b£744a5240 
Od7ab03208f1d7a5 


7416cal8d9e265e0 
11200c2d47c082£f8 


715476£5456e82£9c 
3024702447£76224 


£O38a568b53a2£8F 
6217c1c02153302c 


c418f£6£F90602c79a 
87£0901c227adbb3 


4f£1f£4f21df3dcf43 
fb7co63fcddf4alc2 


13eb82e4b98d0e67 
fbec0e54d48d4f2d 


820e75046567bace 
b16a9397472£0123 


741£a5dc290dd02c 
ed40c88214823792 


a4809bf6dabaa8bd 
bec3d7e88c855194 


d70blaa4c800979c 


98d2b19d201f£2bb6 


2905348d87cd5590 
4324c8caccf7753c 


33c6b4a0l166b7cIc 
d49cef5bd2dec121 


ldb4ee606d2a7a96 
b17d15b397521ab3 


5Scef5b2£00142660 
789e540£22e13932 


££74£4a162435903 
6c0Obe33dcc6e7572 


41740b736e9676a9 
d8e401251592dab6c 


931059fe9279ff1d 
7£31116887ecea596 


356d08d982e2ead4 
40c28c34b1lbbe906 


89dc825e7235c74b 
7a499ae05da50b£2 


97901 £333e662fdc 
4472b2e331ddfab4 


69c8E40eb38b6022 
177589502dd39aa2 


4920943f£fe52b207 
6b813a0d0cd£4991 


b4cb0df£332d108ab 
8£e3d28097£18618 


e7748£b£744a5240 
Od7ab03208f1d7a5 


7416cal8d9e265e0 
11200c2d47c082£f8 


7T5476£5456e82£9c 
3024702447£76224 


£638a568b53a2£8EF 
6217c1c02153302c 


c418£6f90602c79a 
87£0901c227adbb3 


4f£1f£4f21df3dcf43 
fb7c63fcddf4alc2 


13eb82e4b98d0e67 
fboc0e54d48d4f2d 


820e€75046567bace 
b16a9397472£0123 


741 £a5dc290dd02c 
ed40c88214823792 


a4809bf6dabaa8bd 


63 


lbc2160f4£3711dc 


5eab10b19a5143a8 
98d2b19d201£2bb6 


2905348d87cd5590 
4324c8caccf7753c 


33c6b4a01l66b7cIc 
d49cef5bd2dec121 


ldb4ee606d2a7a96 
b17d15b397521ab3 


5cef5b2£00142660 
789e540£22e13932 


££74£4a162435903 
6cObe33dcc6e7572 


41740b736e9676a9 
d8e401251592da6c 


931059fe9279ff1d 
7£31116887eea596 


356d08d982e2ead4 
40c28c34blbbe906 


89dc825e7235c74b 
7a499ae05da50bEF2 


97901 £333e662fdc 
4472b2e331ddfab4 


69c8E40eb38b6022 
177589502dd39aa2 


4920943ffe52b207 
6b813a0d0cd£4991 


b4cb0d£332d108ab 
8£e3d28097£18618 


e7748£b£744a5240 
Od7ab03208f1d7a5 


7416cal8d9e265e0 
11200c2d47c082£f8 


715476£5456e82£9c 
3024702447£76224 


£638a568b53a2f£8EF 
6217c1c02153302c 


c418£6f90602c79a 
87£0901c227adbb3 


4f1f4f21df3dcf43 
fb7c63fcddf4alc2 


13eb82e4b98d0e67 
fbec0e54d48d4f£2d 


820e75046567bace 
b16a9397472£0123 


741 f£a5dc290dd02c 


76396996200065£7 


£2911cllc96e5fE5 
lbc2160f4£3711dc 


5eab10b19a5143a8 
98d2b19d201f£2bb6 


2905348d87cd5590 
4324c8caccf7753c 


33c6b4a0l166b7cIc 
d49cef5bd2dec121 


ldb4ee606d2a7a96 
b17d15b397521ab3 


5cef5b2£00142660 
789e540£22e13932 


££74£4a162435903 
6cObe33dcc6e7572 


41740b736e9676a9 
d8e401251592dab6c 


931059fe9279ff1d 
7£31116887eea596 


356d08d982e2ead4 
40c28c34blbbe906 


89dc825e7235c74b 
7a499ae05da50bEF2 


97901 £333e662fdc 
4472b2e331ddfab4 


69c8FE40eb38b6022 
177589502dd39aa2 


4920943f£fe52b207 
6b813a0d0cd£ 4991 


b4cbh0d£332d108ab 
8£e3d28097£18618 


e7748£b£744a5240 
Od7ab03208f1d7a5 


7416cal8d9e265e0 
11200c2d47c082£f8 


715476£5456e82£9c 
3024702447£76224 


£638a568b53a2f8EF 
6217c1c02153302c 


c418£6f90602c79a 
87£0901c227adbb3 


4f1f£4f21df3dcf43 
fb7c63fcddf4alc2 


13eb82e4b98d0e67 
fbhec0e54d48d4f2d 


820e75046567bace 


4962£310bdbd54b0 


9al195492cfdb4745 
2c82d09c£05c£687 


b7e68364£07£017e 
2alffb84031lblb6éc 


0e574b8e0b35e452 
29bdab29ee472a23 


c176009c£82fa842 
cca47fbe31b335f4 


5d4£78c7a9bdbed2 
eaf198615e99ffdc 


Slab3be828d8dl3c 
bd527cd188f£b59ae 


4d639ef80d0f6d3e 
b2611b90£90d732E 


bba9c¥9efe0fbcb6c8 
£00579337591a2c9 


3405d7cad2e8a689 
O£f6649f64ec8e109 


€a54d908505798b3 
e£48a48999108077 


be31ldlcOcccl143be 
4fc2d4cad0c9lafc 


285a76d23£6a0073 
a730855599b738a3 


a7l4ceff1l4bebc24 
53c581dae1831d80 


697cal4913a50a26 
34d39344354aacd2 


3a38fa3775d7007c 
e26f3a21e9a27691 


44cea14d8e450c844 
5319374£b88dd485 


0928b75c925£F91e2 
719f4be3c5a372911 


6db5469fa1l9c0e27 
lébeec0fecl68e79 


384e3159898a7362 
55fa3ad1102298a8 


483c64d3fdebf828 
1a23843192lea75e 


c9464988a1939bc£ 
e3f£3f08ac9I0£86cd 


98bc93bca795059c 
9e04fb49a5fd9l1lde 


bofcl0ladld74e20 
fd1l3cd3620f6c1£4 


bec3d7e88c855194 


d70blaa4c800979c 
4962£310bdbd54b0 


9a195492cf£db4745 
2c82d09c£05c£687 


b7e68364£07£017e 
2Zalffb84031lblb6éc 


0e574b8e0b35e452 
29bdab29ee472a23 


c176009c£82fa842 
cca47fbe31b335f4 


5d4£78c7a9bdbed2 
eaf198615e99ffdc 


Slab3be828d8dl3c 
bd527cd188f£b59ae 


4d639ef80d0f6d3e 
b2611b90£90d732E 


bba9c9efe0fbcbc8 
£00579337591a2c9 


3405d7cad2e8a689 
O£f6649f64ec8e109 


€a54d908505798b3 
e£48a48999108077 


be3l1ldlcOcccl143be 
4fc2d4cad0c9lafec 


285a76d23£6a0073 
a730855599b738a3 


a7l4ceff1l4bebc24 
53c581dae1831d80 


697cal4913a50a26 
34d39344354aacd2 


3a38fa3775d7007c 
e26f3a21e9a27691 


44cea14d8e450c844 
5319374£b88dd485 


0928b75c925F91e2 
719f4be3c5a372911 


6db5469fa1l9c0e27 
1lébeec0fecl68e79 


384e3159898a7362 
55fa3ad1102298a8 


483c64d3fdebf828 
1a23843192lea75e 


c9464988a1939bc£ 
e3f£3f08ac9I0£86cd 


98bc93bca795059c 
9e04fb49a5fd9l1lde 


64 


ed40c88214823792 


a4809bf6dabaa8bd 
bec3d7e88c855194 


d70blaa4c800979c 
4962£310bdbd54b0 


9a195492cf£db4745 
2c82d09c£05c£687 


b7e68364f07£017e 
2alffb84031bl1lb6c 


0e574b8e0b35e452 
29bdab29ee472a23 


c176009c£82fa842 
cca47fbe31b335f4 


5d4£78c7a9bdbed2 
eaf198615e99ffdc 


5Slab3be828d8d13c 
bd527cd188f£b59ae 


4d639ef80d0f6d3e 
b2611b90£90d0732£ 


bba9c¥efe0fbcb6c8 
£00579337591a2c9 


3405d7cad2e8a689 
0£f6649f64ec8e109 


€a54d908505798b3 
ef48a48999108077 


be3l1ldlc0cccl143bec 
4fc2d4cad0c9lafec 


285a76d23£6a0073 
a730855599b738a3 


a7l4ceff1l4bebc24 
53c581dae1831d80 


697cal4913a50a26 
34d39344354aacd2 


3a38fa3775d7007c 
e26f3a21e9a27691 


44ea14d8e450c844 
5319374£b88dd485 


0928b75c925F91e2 
19f4be3c5a372911 


6db5469fa1l9c0e27 
16beec0fecl68e79 


384e3159898a7362 
55£a3ad1102298a8 


483c64d3fdebf£828 
1a23843192lea75e 


c9464988a1939bc£ 
e3f3f08ac9I0£86cd 


b16a9397472£0123 


741 f£a5dc290dd02c 
ed40c88214823792 


a4809bf6dabaa8bd 
bec3d7e88c855194 


d70blaa4c800979c 
4962£310bdbd54b0 


9a195492cf£db4745 
2c82d09c£05c£687 


b7e68364f07£017e 
2alffb84031lbl1lb6c 


0e574b8e0b35e452 
29bdab29ee472a23 


c176009c£82fa842 
cca47fbe31b335f4 


5d4£78c7a9bdbed2 
eaf198615e99ffdc 


5lab3be828d8d13c 
bd527cd188f£b59ae 


4d639ef80d0f6d3e 
b2611b90£90d0732£ 


bba9c9¥efe0fbcb6c8 
£00579337591a2c9 


3405d7cad2e8a689 
O0f6649f64ec8e109 


€a54d908505798b3 
ef48a48999108077 


be31ldlcOcccl43bec 
4fc2d4cad0c9lafec 


285a76d23£6a0073 
a730855599b738a3 


a7l4ceff1l4bebc24 
53c581dae1831d80 


697cal4913a50a26 
34d39344354aacd2 


3a38fa3775d7007c 
e26f3a21e9a27691 


44ea14d8e450c844 
5319374£b88dd485 


0928b75c925£F91e2 
19f4be3c5a372911 


6db5469fa1l9c0e27 
16ébeec0fecl68e79 


384¢e3159898a7362 
55£a3ad1102298a8 


483c64d3fdebf828 
1a23843192lea75e 


= 68 : fac26e6e4da4705d b6fc101lad1ld74e20 98bc93bca795059c c9464988al1939bcf 
0d60228aabe55b6e fd13cd3620f6c1f£4 9e04fb49a5fd91de e3f3f08ac90f86cd 
=69 : 2a630c58cc27fcaa fac26e6e4da4705d bofcl101lad1ld74e20 98bc93bca795059c 
a2£7£27a3ec25aba 0d60228aabe55b6e fd1l3cd3620f6c1f£4 9e04fb49a5fd91de 
= 70 159a02d4faeellb4 2a630c58cc27fcaa fac26e6e4da4705d b6fcl101ladl1d74e20 
b2860fc55bdedaaé6 a2£7£27a3ec25aba 0d60228aabe55b6e fd1l3cd3620f6c1f£4 
=71: 9A38bdb9df22b557 159a02d4faeellb4 2a630c58cc27fcaa fac26e6e4da4705d 
dfc37c68af65f8bc b2860fc55bdedaaé a2£7£27a3ec25aba 0d60228aabe55b6e 
=72: d42c3a57cfa78513 9d38bdb9df22b557 159a02d4faeellb4 2a630c58cc27fcaa 
bb56deab6a325ba32 dfc37c68af65f8bc b2860fc55bdedaaé a2£7£27a3ec25aba 
= 73 abab4b0ca75al7c7 d42c3a57cfa78513 9dA38bdb9d£22b557 159a02d4faeellb4 
9Yac71d1lc037a8bbd bb56deab6a325ba32 dfc37c68af65f8bec b2860fc55bdedaaé 
=74: 500£7b61186f6c2e abab4b0ca75al7c7 d42c3a57cfa78513 9dA38bdb9d£22b557 
8347£5736531b3ec 9Yac71d1lc037a8bbd bb56dea6a325ba32 dfc37c68af65f8bec 
= 75 4abe0afb6ab7db2fe 500£7b61186f6c2e abab4b0ca75al7c7 d42c3a57cfa78513 
14e986342ddced0f 8347£5736531b3ec 9Yac71d1lc037a8bbd bb56dea6a325ba32 
= 76 e1053fc85f9e56be 4abe0afbab7db2fe 500£7b61186f6c2e abab4b0ca75al7c7 
4779767cc2ec5321 14e986342ddced0f 8347£5736531b3ec 9Yac71d1lc037a8bbd 
=77: 7001201948fb3d71 e1053fc85f9e56be 4abeQafb6ab67db2fe 500£7b61186f6c2e 
S5cdf6c58fc052572 4779767cc2ec5321 14e986342ddced0f 8347£5736531b3ec 
= 78 88146da76f£f6£23a 7001201948fb3da71 e1053fc85f9e56be 4abe0afb6ab67db2fe 
8901cffe7a74db98 Scdf6c58fc052572 477976 7cc2ec5321 14e986342ddced0f 
= 79 5ec3802b9ecfef33 88146da76ff6f23a 7001201948fb3d71 e1053fc85f9e56be 
5f2eead69efb4233 8901cffe7a74db98 5cdf6c58£c052572 477976 7cc2ec5321 


That completes the processing of the first message block, M“’. The intermediate hash value, H“”, 
is calculated to be 


Hey cbbb9d5dc1059ed8 5ec3802b9ecfef33 2a7£1d895£d58e0b 
Ae 629a292a367cd507 88146da76f££6£23a eaae96d1a673c741 
AD 9159015a3070dd17 7001201948£b3a71 015a2173796c1a88 
HY 152fecd8£70e5939 ©1053£c85f£9e56be £6352cal56acaf£7 
AL 67332667££C00b31 5 £2eead69efb4233 c662113e9ebb4d64 
Ae 8eb44a8768581511 8901cf£e7a74db98 17b61a85e2cc£0a9 
Hi? db0c2e0d64£98£a7 Sed£6c58£c052572 37eb9a6660£eb519 
A” 47p5481dbefa4fa4 471976 7ec2ec5321 8f£2ebe9a8leba2cs. 
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The words of the second padded message block, M”?, are then assigned to the words Wo,...,W15 





of the message schedule: 


65 


= 0000000000000000 


0000000000000000 
0000000000000000 


0000000000000000 
= 0000000000000000 


0000000000000000 
0000000000000000 


= 0000000000000000 


Wg = 0000000000000000 
Wo = 0000000000000000 
Wio = 0000000000000000 
Wi = 0000000000000000 
Win = 0000000000000000 
Wi3 = 0000000000000000 
Wi4 = 0000000000000000 
Wis = 0000000000000380. 


The following schedule shows the hex values for a, b, c, d, e, f, g, and h after pass t of the “for t 
= 0 to 79” loop described in Sec. 6.3.2, step 4. 


t= 0: 
=a 
fS—23 
= 5378 
t= 4: 
f="9°2 
f= 6.2 
iS 3 
t= 8: 
t= 9: 
t =10 
P= Lb? 
t =12 
t= 
t=14 
215 


13: 


a 

4 

ée 
657a3c2ca9639d40 
791£2ad0055fdd62 
2Za4ads5d9b9fde6d86 
dbf2e656b5be3f14 


£0aa6758653d1664 
6e0466c82£4£d35d 


43a76£011a73d317 
1367bd36d15e8b40 


d802c2dfd7cc48£6 
£73d759b839a2a21 


481208e5e8314602 
6b2271a46£14c843 


af9f8112d£35cf£33 
257£4a7d524d7b0b 
6730781342d1131b 
81957ad408cec995 
82e64c677356a82e 
10b62fdce4ebaad1l 


203578820a8f27d0 
9937b3a0cb9248al 


Obac2a84c29ale2b 
6ad288dab3de0d53 


dd3££8a140485c25 
3149b728123c465e 


€826239£830c5346 
4bb7b199c4ced186 


32215ce49aae40Ff8 
9a2872c72d790d49 


859533bac457£94e 
539£225d25ebeb4c 


a88704d9962849£3 


b 
/ 


f 


2a7£1d895fd58e0b 
c662113e9ebb4d64 


657a3c2ca9639d40 
791£2ad0055fdd62 


2Za4ad5d9b9fde6d86 
dbf2e656b5be3f14 


£0aa6758653d1664 
6e0466c82£4F£d35d 


43a76£011a73d317 
1367bd36d15e8b40 


d802c2dfd7cc48£6 
£73d759b839a2a21 


481208e5e8314602 
6b2271a46f14c843 


af9f8112d£35c£33 
257£4a7d524d7b0b 


6730781342d1131b 
81957ad408cec995 


82e64c677356a82e 
10b62fdce4ebaa5sl1 


203578820a8f27d0 
9937b3a0cb9248al 


Obac2a84c29ale2b 
6ad288dab3de0d53 


dd3££8a140485c25 
3149b728123c465e 


€826239£830c5346 
4bb7b199c4ced186 


32215ce49aae40f8 
9a2872c72d790d49 


859533bac457£94e 
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c 
/ 
& 


eaae96d1a673c741 
17b6la85e2ccf0a9 


2a7£1d895fd58e0b 
c662113e9ebb4d64 


657a3c2ca9639d40 
791£2ad0055fdd62 


2Za4ad5d9b9fde6d86 
dbf2e656b5be3f14 


£0aa6758653d1664 
6e0466c82£4£d35d 


43a76£011a73d317 
1367bd36d15e8b40 


d802c2dtd7cc48£6 
£73d759b839a2a21 
481208e5e8314602 
6b2271a46£14c843 
af9f8112d£35c£33 
257£4a7d524d7b0b 


6730781342d1131b 
81957ad408cec995 


82e64c677356a82e 
10b62fdce4ebaa5sl1 


203578820a8f27d0 
9937b3a0cb9248al 


Obac2a84c29ale2b 
6ad288dab3de0d53 


dd3££8a140485c25 
3149b728123c465e 


€826239f830c5346 
4bb7b199c4ced186 


32215ce49aae40F8 


d 

/ 

h 
015a2173796c1la88 
37eb9a6660feb519 


eaae96d1a673c741 
17b6l1la85e2ccf0a9d 


2a7£1d895fd58e0b 
c662113e9ebb4d64 


657a3c2ca9639d40 
791£2ad0055fdd62 


2a4ad5d9b9fde6d86 
dbf2e656b5be3f14 


£0aa6758653d1664 
6e0466c82£4£d35d 


43a76£011a73d317 
1367bd36d15e8b40 
d802c2dtd7cc48£6 
£73d759b839a2a21 
481208e5e8314602 
6b2271a46£14c843 


af9f8112d£35c£33 
257£4a7d524d7b0b 


6730781342d1131b 
81957ad408cec995 


82e64c677356a82e 
10b62fdce4ebaa5l1 


203578820a8f£27d0 
9937b3a0cb9248al 


Obac2a84c29ale2b 
6ad288dab3de0d53 


dd3££8a140485c25 
3149b728123c465e 


€826239f830c5346 


= 17 


=19: 


=21 2 


=22.: 


= 24: 


=27: 


= 29: 


= 30: 


=31: 


=324 


= 33: 


= 34: 


=35: 


= 36: 


=37 3 


63b£0472ef24£7a5 


3aa5c566a6cfadlic 
ce23f6380ead33c2 


2e9c483a7c08c9cl 
b033f£945f3e6b4a2 


5a68585ae0835231 
8a0187a9ceI93d875 


cf£9cd481e6407ced 
37a29fa30531lbac7 


3£463£864f6474d9 
Ocf£45bb3c07e847d 


cea26288dff£931a5 
34f1b5£46b£48a73 


89634cd0E4£6c08a 
3a728a543405a8e4 


625fa38464e5c880 
ceelb47a49b2fc42 


7dd21453al5a3b92 
9308bfalbelf800b 


3d76277bc8cb0601 
480e017f£5d1£0ble 


c8d904196f5a1 £54 
4bd2£1f6e940c332 


b033139b58b6e423 
£816eclcbhe0adafb 


097768182cb65£57 
62e3de54dcd8 £974 


3196649ab5£5cc39 
£6887dell6d0bd8ft 


£78d3d221d16965f 
c7e4859c2858ed3c 


£58e9876b4984b51 
621352b394b8ca02 


38fb£0e726e04£78 
4319856f£17a0a430 


£4be0b32a57597a2 
c6d392a3b4eb0ed8 


£8abb3fe2e4f0634 
602663c0F34ef £33 


9bc3871be8046113 
05542ecd9883cb6ba 


flbd2d46be61 9585 
e€47b9933baftdc655 


24c84b58d119affe 
5ae0b1175beb5d2b 


ec6d3abc2b291fd3 


539£225d25ebeb4c 


a88704d9962849£3 
63b£0472ef24£7a5 


3aa5c566a6cfadlic 
ce23f6380ead33c2 


2e9c483aT7c08c9cl 
b033f£945f3e6b4a2 


5a68585ae0835231 
8a0187a9ceI93d875 


cf£9cd481e6407ced 
37a29fa30531bac7 


3£463£864f6474d9 
Oct45bb3c07e847d 


cea26288dff£931a5 
34f1b5£46b£48a73 


89634cd0E4£6c08a 
3a728a543405a8e4 


625fa38464e5c880 
ceelb47a49b2fc42 


7dd21453al5a3b92 
9308bfalbelf800b 


3d76277bc8cb0601 
480e017f£5d1£0ble 


c8d904196f5a1 £54 
4bd2£1f6e940c332 


b033139b58b6e423 
£816eclcbe0adafb 


0977681 82cb65£57 
62e3de54dcd8 £974 


3196649ab5£5cc39 
£6887dell6d0bd8ft 


£78d3d221d16965f 
c7e4859c2858ed3c 


£58e9876b4984b51 
621352b394b8ca02 


38fb£0e726e04£78 
4319856f£17a0a430 


£4be0b32a57597a2 
c6d392a3b4eb0ed8 


£8abb3fe2e4f0634 
602663c0fF34ef £33 


9bc3871be8046113 
05542ecd9883cb6ba 


f1lbd2d46be619585 
e47b9933baftdc655 


24c84b58d119affe 


67 


9a2872c72d790d49 


859533bac457£94e 
539£f225d25ebeb4c 


a88704d9962849£3 
63b£0472ef24£7a5 


3aa5c566a6cfadic 
ce23f6380ead33c2 


2e9c483a7c08c9cl 
bO33f945f3e6b4a2 


5a68585ae0835231 
8a0187a9ceI93d875 


cf£9cd481e6407ced 
37a29fa30531bac7 


3£463f864£6474d9 
Ocf45bb3c07e847d 


cea26288dftf£931a5 
34f1b5f46b£48a73 


89634cd0E4£6c08a 
3a728a543405a8e4 


625fa38464e5c880 
ceelb47a49b2fc42 


7dd21453a15a3b92 
9308bfalbelf800b 


3d76277bc8cb0601 
480e017£5d1£0ble 


c8d904196f5al1 £54 
4bd2f1£6e940c332 


b033139b58b6e423 
£816eclcbe0adafb 


097768182cb65£57 
62e3de54dcd8 £974 


3196649ab5f£5cc39 
£6887dell6d0bd8ft 


£78d3d221d16965f 
c7e4859c2858ed3c 


£58e9876b4984b51 
621352b394b8ca02 


38fb£0e726e04£78 
4319856f17a0a430 


£4be0b32a57597a2 
c6d392a3b4eb0ed8 


£8abb3fe2e4f0634 
602663c0F34ef £33 


9bc3871be8046113 
05542ecd9883c6ba 


flbd2d46be619585 


4bb7b199c4ced186 


32215ce49aae40Ff8 
9a2872c072d790d49 


859533bac457£94e 
539£225d25ebeb4c 


a88704d9962849f3 
63bf£0472ef24£7a5 


3aa5c566a6cfadlic 
ce23f6380ead33c2 


2e9c483a7c08c9cl 
bO33f945f3e6b4a2 


5a68585ae0835231 
8a0187a9ceI93d875 


cf£9cd481e6407ced 
37a29fa30531bac7 


3£463£864f6474d9 
Ocf45bb3c07e847d 


cea26288dftf£931a5 
34f1b5f46b£48a73 


89634cd0E4£6c08a 
3a728a543405a8e4 


625fa38464e5c880 
ceelb47a49b2fc42 


7dd21453a15a3b92 
9308bfalbelf800b 


3d76277bc8cb0601 
480e017£5d1£0ble 


c8d904196f5al1 £54 
4bd2f1£6e940c332 


b033139b58b6e423 
£816eclcbe0adafb 


097768182cb65£57 
62e3de54dcd8 £974 


3196649ab5f£5cc39 
£6887dell6d0bd8ft 


£78d3d221d16965f 
c7e4859c2858ed3c 


£58e9876b4984b51 
621352b394b8ca02 


38fb£0e726e04£78 
4319856f17a0a430 


£4be0b32a57597a2 
c6d392a3b4eb0ed8 


f£8abb3fe2e4f0634 
602663c0f34ef £33 


9bc3871be8046113 


=41: 


=42: 


9ecc381d277748a3 


e266c1f£77d5ee90e 
d92£34c110296b32 


5Sadbaa463642b570 
83e8f410F859388e 


50fdb7bb2e499a34 
257ed8eab645e933a 


06514212bb7£fal52 
466781db35181labe 


673ed5a55££2b07d 
ba78£3545e7914£0 


125e2e5118393e2b 
4453b23a3e13b090 


O7ee813df5910cec 
eae013a0510d23cc 


0a0508£0a1d719c3 
a93815eb58891016 


Ofc8£3b3efch1b96 
a071cc73b966e801 


02aa5b28199f304a 
a49flel4f8a2be7a 


9223e1b34382f104 
bfe2106e512a7331 


eOlale47ee8d5656 
592b899b35469a78 





fa7bl7aad857c2f4 
eb6e85e4682c1671 


Oc523b7a3c84ab77 
b5e80e871ac0c005 


c773d8b69dalfde2 
be2b0602fc6f8f65 


cé6blbc79a4£23679 
c80bdc57£38a05e4 


bef9bb0fe467£d60 
ldab0bd116e434e5 


8e3db3e380ecT7£22 
32ef50751734ffee 


1003ec42412c7b7d 
lec0d46£f349fd058 


375£facc76291£85e 
59c8bc0488£9768b 


bd113d92e0354£b9 
e66c73db3fad397d 


2£61d4fd8e36d9d4 
e9£21933e1c02948 


lblad88b9270lae2 
6£d0c1719bcac335 


Sae0b1175beb5d2b 


ec6d3abc2b291fd3 
9ecc381d277748a3 


e266c1f£77d5ee90e 
d92£34c110296b32 


5Sadbaa463642b570 
83e8£410F859388e 


50fdb7bb2e499a34 
257ed8ea645e933a 


06514212bb7£al52 
466781db35181labe 


673ed5a55££F£2b07d 
ba78£3545e7914£0 


125e2e5118393e2b 
4453b23a3e13b090 


O7ee813df5910cec 
eae013a0510d23cc 


0a0508£0a1d719c3 
a93815eb58891016 


Ofc8£3b3efcbh1b96 
a071cc73b966e801 


02aa5b28199f304a 
a49flel4f8a2be7a 


9223e1b34382f104 
bfe2106e512a7331 


eOlale47ee8d5656 
592b899b35469a78 


fa7bl7aad857c2f4 
eb6e85e4682c1671 


Oc523b7a3c84ab77 
b5e80e871ac0c005 


c773d8b69dalfde2 
be2b0602fc6f8f65 


cé6blbc79a4£23679 
c80bdc57£38a05e4 


bef9bb0fe467Fd60 
ldab0bd116e434e5 


8e3db3e380ec7£22 
32ef50751734ffee 


1003ec42412c7b7d 
lec0d46£349fd058 


375facc76291£85e 
59c8bc0488£9768b 


bd113d92e0354£b9 
e66c73db3fad397d 


2£61d4fd8e36d9d4 
e9£21933e1c02948 
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e€47b9933baftdc655 


24c84b58d119affe 
5ae0b1175beb5d2b 


ec6d3abc2b291fd3 
9ecc381d277748a3 


e266c1£77d5ee90e 
d92£34c110296b32 


5adbaa463642b570 
83e8f£410F859388e 


50fdb7bb2e499a34 
257ed8eab645e933a 


06514212bb7£al52 
466781db35181labe 


673ed5a55££F£2b07d 
ba78£3545e7914f0 


125e2e5118393e2b 
4453b23a3e13b090 


07ee813df5910cec 
eae013a0510d23cc 


0a0508£0a1d719c3 
a93815eb58891016 


Ofc8£3b3efch1b96 
a071cc73b966e801 


02aa5b28199f304a 
a49flel4f8a2be7a 


9223e1b34382f104 
bfe2106e512a7331 


eOlale47ee8d5656 
592b899b35469a78 


fa7bl7aad857c2£4 
eb6e85e4682c1671 


O0c523b7a3c84ab77 
b5e80e871lac0c005 


c773d8b69dalfde2 
be2b0602fc6f8f£65 


céblbc79a4£23679 
c80bdc57£38a05e4 


bef9bb0fe467£d60 
ldab0bd116e434e5 


8e3db3e380ecT7£22 
32ef50751734ffee 


1003ec42412c7b7d 
lec0d46£349fd058 


375£facc76291£85e 
59c8bc0488£9768b 


bd113d92e0354£b9 
e66c73db3fad397d 


05542ecd9883cb6ba 


flbd2d46be619585 
e47b9933batdc655 


24c84b58d119affe 
5ae0b1175beb5d2b 


ec6d3abc2b291fd3 
9ecc381d277748a3 


e266c1£77d5ee90e 
d92£34c110296b32 


5adbaa463642b570 
83e8£410F859388e 


50fdb7bb2e499a34 
257ed8eab645e933a 


06514212bb7£al52 
466781db3518labe 


673ed5a55££F2b07d 
ba78£3545e7914f0 


125e2¢e5118393e2b 
4453b23a3e13b090 


O07ee813df5910cec 
eae013a0510d23cc 


0a0508£0a1d719c3 
a93815eb58891016 


Ofc8£3b3efch1b96 
a071cc73b966e801 


02aa5b28199f304a 
a49flel4f8a2be7a 


9223e1b34382f104 
bfe2106e512a7331 


eOlale47ee8d5656 
592b899b35469a78 


fa7bl7aad857c2f4 
eb6e85e4682c1671 


Oc523b7a3c84ab77 
b5e80e871lac0c005 


c773d8b69dalfde2 
be2b0602fc6f8f65 


céblbc79a4£23679 
c80bdc57£38a05e4 


bef9bb0fe467£d60 
ldab0bd116e434e5 


8e38db3e380ec7£22 
32ef50751734ffee 


1003ec42412c7b7d 
lec0d46£349fd058 


375facc76291£85e 
59c8bc0488£9768b 


=62: 93d09fc06al19c5da lblad88b9270lae2 2£61d4fd8e36d9d4 bd113d92e0354£b9 
b765273£571la57le 6fd0c1719bcac335 e9£21933e1c02948 e66c73db3fad397d 
=63: O4bea2ce99cc3bfo 93d09fc06al19c5da lblad88b9270lae2 2f£61d4fd8e36d9d4 
6ab0e443c2f63714 b765273£571la57le 6£fd0c1719bcac335 e9£21933e1c02948 
= 64: O2ebf£c0al3492£52 04bea2ce99cc3bfo 93d09fc06al9c5da lblad88b9270lae2 
77300c52e05af415 6ab0e443c2f63714 b765273£571lad57le 6fd0c1719bcac335 
=65: lbft525abce8def04 O2ebf£c0al3492£52 04bea2ce99cc3bto 93d09fc06al9c5da 
8faf1l2c33bb371b9 77300c52e05af415 6ab0e443c2f63714 b765273£571la57le 
=66: b6a36a3431547328 lbft525abce8def04 O2ebf£c0al3492£52 04bea2ce99cc3bfo6 
fa8bb40b4e08100F 8faf1l2c33bb371b9 77300c52e05af415 6ab0e443c2f63714 
= 67 ffdaf83202af0d72 b6a36a3431547328 lbf525abce8def04 O2ebfc0al3492£52 
8045a82£723a9b4e fa8bb40b4e08100£ 8faf12c33bb371b9 77300c52e05af415 
= 68 : 12737373d2985232 ffdaf83202af0d72 b6a36a3431547328 lbf525abce8def04 
870dbce23bad8 988 8045a82£723a9b4e fa8bb40b4e08100£ 8faf12c33bb371b9 
= 69 : 6189f68162b256b5 12737373d2985232 ffdaf83202at0d72 b6a36a3431547328 
8c059af157146580 870dbce23bad8 988 8045a82£723a9b4e fa8bb40b4e08100£ 
= 70 20b0a9ald21c482d 6189f68162b256b5 12737373d2985232 ffdaf83202at0d72 
£22b874c96785ec8 8c059af157146580 870dbce23bad8 988 8045a82£723a9b4e 
=71: ef6d863c2127b394 20b0a9ald21c482d 6189f68162b256b5 12737373d2985232 
b7aee28337d69dab £22b874c96785ec8 8c059af157146580 870dbce23bad8 988 
=72: d3efe8b442689074 e£6d863c2127b394 20b0a9ald21c482d 6189f68162b256b5 
22491 ab9cdecbb6b0 b7aee28337d69dab £22b874c96785ec8 8c059af157146580 
= 73 4694354944a9f487 d3efe8b442689074 ef6d863c2127b394 20b0a9ald21c482d 
659890a5818d0c50 22491 ab9cdecbb6b0 b7aee28337d69dab £22b874c96785ec8 
=74: b93c2403773dd08c 4694354944a9f487 d3efe8b442689074 ef6d863c2127b394 
88c2c2ac52c4£f679 659890a5818d0c50 22491 ab9cdecb6b0 b7aee28337d69dab 
=75 025848e3ab6b69d3 b93c2403773dd08c 4694354944a9f487 d3efe8b442689074 
750da3d4el1l6alb64 88c2c2ac52c4f£679 659890a5818d0c50 22491ab 9cdecb6b0 
= 76 396b53e58d04471b 025848e3ab6b69d3 b93c2403773dd08c 4694354944a9f487 
700486b£252cba75 750da3d4el1l6albo4 88c2c2ac52c4£679 659890a5818d0c50 
=77: 51lb6f9a3clceeb4a 396b53e58d04471b 025848e3ab6b69d3 b93c2403773dd08c 
e6b3850de8ae6230 700486b£252cbha75 750da3d4el6albo4 88c2c2Zac52c4£679 
= 78 526a98f5dc595406 51lb6f9a3clceeb4a 396b53e58d04471b 025848e3ab6b69d3 
4£0dcf74aea76£90 e6b3850de8ae6230 10048 6b£252cba75 750da3d4el6alb64 
=79 deb3eeaa97 3bb9dd 526a98£5dc595406 51b6f£9a3clceeb4a 396b53e58d04471b 
3665b5dbb6c2e055 4£0dcf74aea76£90 e6b3850de8ae6230 10048 6b£E252cba75 


That completes the processing of the second and final message block, M“. The final hash value, 


H®, is calculated to be 





He = 2a7f£1d895fd58e0b deb3eeaa973bb9dd 09330c33£71147e8 
ir = eaae96d1la673c741 526a98£5dc595406 3d192f£c782cd1b47 
AY = 015a2173796c1a88 51be6f£9a3clceeb4a 53111b173b3b05d2 
a = £6352cal56acafft7 396b53e58d04471b 2f£a08086e3b0F712 
Ho = c662113e9ebb4d64 3665b5dbb6c2e055 fcc7c7la557e2db9 
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H& = 17p6la85e2cc£0a9 + 4£0dcf74aea76f90 = 66c3e9£a91746039 
H® = 37eb9a6660feb519 + e6b3850de8ae6230 = 1e9f1£7449ad1749 
H® = sf2ebe9a8le6a2c5 + 700486bf252cba75 = f£334559a7135d3a. 


The final hash value is truncated to its left-most 384 bits (i.e., H{”,...,H{”), resulting in the 384-bit 
message digest 


09330c33£71147e8 3d192fc782cd1b47 53111b173b3b05d2 2fa08086e3b0£712 


fcc7c7la557e2db9 66c3e9fa91746039. 


D.3 SHA-384 Example (Long Message) 


Let the message M be the binary-coded form of the ASCII string which consists of 1,000,000 
repetitions of the character “a”. The resulting SHA-384 message digest is 


9d0e1809716474cb 086e834e310a4alc ed1l49e9c00Ff24852 7972cec5704c2a5b 


O7b8b3dc38ecc4eb ae97ddd87£3d8985. 


70 


APPENDIX E: REFERENCES 


[180-1] Federal Information Processing Standards (FIPS) Publication 180-1, Secure Hash 
Standard (SHS), U.S. DoC/NIST, April 17, 1995. 


[HAC] A. Menezes, P. van Oorschot, and S. Vanstone. Handbook of Applied 
Cryptography, CRC Press, Inc., October 1997. 


dd 


